Abstract:Modern industrial systems face a growing threat from sophisticated cyberattacks that can cause significant operational disruptions. This work presents a novel methodology for identification of the most critical cyberattacks that may disrupt the operation of such a system. Application of the proposed framework can enable the design and development of advanced cybersecurity solutions for a wide range of industrial applications. Attacks are assessed taking into direct consideration how they impact the system operation as measured by a defined Key Performance Indicator (KPI). A simulation model (SM), of the industrial process is employed for calculation of the KPI based on operating conditions. Such SM is augmented with a layer of information describing the communication network topology, connected devices, and potential actions an adversary can take based on each device or network link. Each possible action is associated with an abstract measure of effort, which is interpreted as a cost. It is assumed that the adversary has a corresponding budget that constrains the selection of the sequence of actions defining the progression of the attack. A dynamical system comprising a set of states associated with the cyberattack (cyber-states) and transition logic for updating their values is also proposed. The resulting augmented simulation model (ASM) is then employed in an artificial intelligence-based sequential decision-making optimization to yield the most critical cyberattack scenarios as measured by their impact on the defined KPI. The methodology is successfully tested based on an electrical power distribution system use case.

Process Stability Modeling and Attack Protection of Industrial Control System Based on Reverse Cloud Algorithm Model

A Microgrid Controller Security Monitoring Model Based on Message Flow

An Improved Support Vector Machine Attack Detection Algorithm for Industry Controls System

Industrial control network security situation awareness based on improved C-SVC

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Stochastic Stability Analysis of Networked Control Systems with Random Cryptographic Protection under Random Zero-Measurement Attacks

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Modeling and Defending Advanced Metering Infrastructure Subjected to Distributed Denial-of-Service Attacks

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Equipment Contention Attack in Cloud Manufacturing Environments and Its Defense

Event-Triggered Security Output Feedback Control for Networked Interconnected Systems Subject to Cyber-Attacks

Research on Key Technology of Industrial Network Boundary Protection based on Endogenous Security

Transfer Adversarial Attacks Across Industrial Intelligent Systems.

Inference Attack and Privacy Security of Data-driven Industrial Process Monitoring Systems

Quantum walks-based classification model with resistance for cloud computing attacks

Risk assessment for industrial control systems based on asymmetric connection cloud and Choquet integral

AI-based Identification of Most Critical Cyberattacks in Industrial Systems

Network Security Evaluation Model Based on Cloud Computing.

Modeling of Intrusion and Defense for Assessment of Cyber Security at Power Substations.

Analysis of Internal Threat Detection Methods of Power Grid under the Characteristic Cloud Computing Model