Abstract:The abundance of cyber-physical components in modern day power grid with their diverse hardware and software vulnerabilities has made it difficult to protect them from advanced persistent threats (APTs). An attack graph depicting the propagation of potential cyber-attack sequences from the initial access point to the end objective is vital to identify critical weaknesses of any cyber-physical system. A cyber security personnel can accordingly plan preventive mitigation measures for the identified weaknesses addressing the cyber-attack sequences. However, limitations on available cybersecurity budget restrict the choice of mitigation measures. We address this aspect through our framework, which solves the following problem: given potential cyber-attack sequences for a cyber-physical component in the power grid, find the optimal manner to allocate an available budget to implement necessary preventive mitigation measures. We formulate the problem as a mixed integer linear program (MILP) to identify the optimal budget partition and set of mitigation measures which minimize the vulnerability of cyber-physical components to potential attack sequences. We assume that the allocation of budget affects the efficacy of the mitigation measures. We show how altering the budget allocation for tasks such as asset management, cybersecurity infrastructure improvement, incident response planning and employee training affects the choice of the optimal set of preventive mitigation measures and modifies the associated cybersecurity risk. The proposed framework can be used by cyber policymakers and system owners to allocate optimal budgets for various tasks required to improve the overall security of a cyber-physical system.

Optimal Resource Allocation and Feasible Hexagonal Topology for Cyber-Physical Systems

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Optimal Coupling Pattern of Cyber-Physical Systems

Robustness Improvement for Cyber Physical System Based on an Optimization Model of Interdependent Constraints

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Optimal Defense Resource Allocation Considering Nonlinear Attack Cost in Power Systems

Optimal Network Defense Resource Allocation Against Advanced Persistent Threats

The Impact of Network Design Interventions on the Security of Interdependent Systems

Game-theoretical Model for Dynamic Defense Resource Allocation in Cyber-physical Power Systems Under Distributed Denial of Service Attacks

Optimal Defense Strategy Selection Method for CPS Considering Integrated Cyber–physical Losses

Game Theory Based Optimal Defensive Resources Allocation with Incomplete Information in Cyber-Physical Power Systems Against False Data Injection Attacks

Industrial Cyber–Physical System Defense Resource Allocation Using Distributed Anomaly Detection

A Tri‐level Optimization Model for Power Systems Defense Considering Cyber‐physical Interdependence

Optimal DoS Attack Strategy for Cyber-Physical Systems via Energy Allocation

Defending transportation networks against random and targeted attacks

Game-Theoretic Analysis of Attack and Defense in Cyber-Physical Network Infrastructures

Game-Theoretic Model for Optimal Cyber-Attack Defensive Decision-Making in Cyber-Physical Power Systems

Fortify Your Defenses: Strategic Budget Allocation to Enhance Power Grid Cybersecurity

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Resilient Control of Cyber-Physical Systems Against Denial-of-Service Attacks