Abstract:Cyber-physical systems (CPS) are interconnected architectures that employ analog, digital, and communication resources for their interaction with the physical environment. CPS are the backbone of enterprise, industrial, and critical infrastructure. Thus, their vital importance makes them prominent targets for malicious attacks aiming to disrupt their operations. Attacks targeting cyber-physical energy systems (CPES), given their mission-critical nature, can have disastrous consequences. The security of CPES can be enhanced leveraging testbed capabilities to replicate power system operations, discover vulnerabilities, develop security countermeasures, and evaluate grid operation under fault-induced or maliciously constructed scenarios. In this paper, we provide a comprehensive overview of the CPS security landscape with emphasis on CPES. Specifically, we demonstrate a threat modeling methodology to accurately represent the CPS elements, their interdependencies, as well as the possible attack entry points and system vulnerabilities. Leveraging the threat model formulation, we present a CPS framework designed to delineate the hardware, software, and modeling resources required to simulate the CPS and construct high-fidelity models which can be used to evaluate the system's performance under adverse scenarios. The system performance is assessed using scenario-specific metrics, while risk assessment enables system vulnerability prioritization factoring the impact on the system operation. The overarching framework for modeling, simulating, assessing, and mitigating attacks in a CPS is illustrated using four representative attack scenarios targeting CPES. The key objective of this paper is to demonstrate a step-by-step process that can be used to enact in-depth cybersecurity analyses, thus leading to more resilient and secure CPS.

Risk Assessment Method for Cyber Security of Cyber Physical Systems

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

Assessing the Physical Impact of Cyberattacks on Industrial Cyber-Physical Systems

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

A Quantitative Risk Assessment Model for Distribution Cyber Physical System under Cyber Attack

Security-Oriented Cyber-Physical Risk Assessment for Cyberattacks on Distribution System

Cyber Risk Assessment for Cyber-Physical Systems: A Review of Methodologies and Recommendations for Improved Assessment Effectiveness

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies

Security Risk Assessment Approach for Distribution Network Cyber Physical Systems Considering Cyber Attack Vulnerabilities

Resilience analysis of cyber-physical systems: A review of models and methods

Cascading Failure Risk Assessment Based on Event-Driven Model in a Cyber-physical Power System

Power System Risk Assessment in Cyber Attacks Considering the Role of Protection Systems

Risk assessment for industrial control systems based on asymmetric connection cloud and Choquet integral

Power System Cyber-physical Modelling and Security Assessment：Motivation and Ideas

Attack Intention Oriented Dynamic Risk Propagation of Cyberattacks on Cyber-Physical Power Systems

Risk Assessment Based Preventive Control for Power Systems

Risk Assessment in Power System Based on Parallel Computation

Asset criticality and risk prediction for an effective cybersecurity risk management of cyber-physical system

Cyber Security Risk Assessment Method for SCADA of Industrial Control Systems

A Risk Assessment Method For Cascading Failure Caused By Eectric Cyber-Physical System (Ecps)