Abstract:Recently issues about cyber-war have gained relevant attention, especially because of gravity of damages that could be caused by cyber attacks to strategic targets, mining security of citizens. Examples of targets might include national civil and military airports, command and control systems of civil and military transportation means electronic military systems for national defense, national infrastructures for water and electricity distribution, industries and also hospitals or firefighters informatics systems. The risk of cyber attacks for the mentioned systems and infrastructures has grown because of the introduction of general-purpose and open (not proprietary)communication protocols, widely interconnecting systems and services. With this regard, it is of great importance the problem of evaluating the impact that cyber attacks could generate and to select effective countermeasures to protect military and civil heterogeneous and interconnected systems. In this paper the Mixed Holistic Reductionist (MHR) model is proposed as a conceptual methodology to evaluate the impact of a set of cyber attacks to military and civil infrastructures of strategic interest. The reductionist approach allows modeling of heterogeneous systems using the simplest elements and then coming to assess the interaction of basic components. The holistic paradigm instead allows to analyze complex systems by evaluating their behavior in complex and thus as a monolithic unit. This model allows combining the holistic method with the reductionist, trying to maintain the benefits of both paradigms. The two methods are linked together through an additional layer which is an intermediate level of abstraction, usually represented by the services of any infrastructure. Services are defined as logical objects, in order to obtain useful functionality to the customer, or other infrastructure. The validity of MHR model has been already tested within the context of Critical Infrastructure protection. In particular, it has been implemented in CISIA, a system-interdependency simulator, developed by “Roma Tre”University. In this work, the effectiveness of the model is studied with regard to government infrastructure protection from cyber attacks and, with this regard, an explicative case study is presented.

Performing Risk Assessment for Critical Infrastructure Protection: A study of human decision-making and practitioners' transnationalism considerations

Isomorphism within risk-management practices of the Australian construction industry

Resilience of Critical Infrastructure Systems: A Systematic Literature Review of Measurement Frameworks

Probabilistic risk assessment for interdependent critical infrastructures: A scenario-driven dynamic stochastic model

On the Evaluation of Privacy Impact Assessment and Privacy Risk Assessment Methodologies: A Systematic Literature Review

Assessing the Resilience of Critical Infrastructure Facilities toward a Holistic and Theoretical Approach: A Multi-Scenario Evidence and Case Study

Strategic Decision-Making in High-Risk Industries: A Focus on Resource Allocation

Study on Performance Influencing Factors in Computer Simulation of Team Reliability Analysis

Importance of Human Resource Management in Risk Management: A study with IT Industry

A risk assessment approach in selecting environmental performance indicators

Automated Cyber and Privacy Risk Management Toolkit

From rationale to lessons learned in the cloud information security risk assessment: a study of organizations in Sweden

Two Decades on Human Reliability Analysis: A Bibliometric Analysis and Literature Review

Risk Response for Critical Infrastructures with Multiple Interdependent Risks: A Scenario-Based Extended CBR Approach

A risk-based multi-level stress test methodology: application to six critical non-nuclear infrastructures in Europe

Knowledge is power – conceptualizing collaborative financial risk assessment

Resilient critical infrastructures: An innovative methodological perspective for critical infrastructure (CI) integrated assessment models by inducing digital technologies during multi-hazard incidents

RAMA: a risk assessment solution for healthcare organizations

Risk assessment methods for process safety, process security and resilience in the chemical process industry: A thorough literature review

Mixed Holistic Reductionistic Approach for Impact Assessment of Cyber Attacks

A Review of Critical Infrastructure Protection Approaches: Improving Security through Responsiveness to the Dynamic Modelling Landscape