Model-Based Risk Assessment for Cyber Physical Systems Security

05/28/2020
by   Ashraf Tantawy, et al.
0

Traditional techniques for Cyber-Physical Systems (CPS) security design either treat the cyber and physical systems independently, or do not address the specific vulnerabilities of real time embedded controllers and networks used to monitor and control physical processes. In this work, we develop and test an integrated model-based approach for CPS security risk assessment utilizing a CPS testbed with real-world industrial controllers and communication protocols. The testbed monitors and controls an exothermic Continuous Stirred Tank Reactor (CSTR) simulated in real-time. CSTR is a fundamental process unit in many industries, including Oil & Gas, Petrochemicals, Water treatment, and nuclear industry. In addition, the process is rich in terms of hazardous scenarios that could be triggered by cyber attacks due to the lack of possible mechanical protection. The paper presents an integrated approach to analyze and design the cyber security system for a given CPS where the physical threats are identified first to guide the risk assessment process. A mathematical model is derived for the physical system using a hybrid automaton to enumerate potential hazardous states of the system. The cyber system is then analyzed using network and data flow models to develop the attack scenarios that may lead to the identified hazards. Finally, the attack scenarios are performed on the testbed and observations are obtained on the possible ways to prevent and mitigate the attacks. The insights gained from the experiments result in several key findings, including the expressive power of hybrid automaton in security risk assessment, the hazard development time and its impact on cyber security design, and the tight coupling between the physical and the cyber systems for CPS that requires an integrated design approach to achieve cost-effective and secure designs.

READ FULL TEXT
POST COMMENT

Comments

There are no comments yet.

Authors

page 4

11/30/2017

Security of Cyber-Physical Systems. From Theory to Testbeds and Validation

Traditional control environments connected to physical systems are being...
05/30/2020

Cyber LOPA: A New Approach for CPS Safety Design in the Presence of Cyber Attacks

Safety risk assessment is an essential process to ensure a dependable Cy...
01/25/2021

Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies

Cyber-physical systems (CPS) are interconnected architectures that emplo...
04/19/2018

Vehicle Security: Risk Assessment in Transportation

Intelligent Transportation Systems (ITS) are critical infrastructure tha...
02/08/2020

BLCS: Brain-Like based Distributed Control Security in Cyber Physical Systems

Cyber-physical system (CPS) has operated, controlled and coordinated the...
03/06/2018

Cyber-Physical Testbed for Power System Wide-Area Measurement-Based Control Using Open-Source Software

The electric power system is a cyber-physical system with power flow in ...
11/09/2018

Science Hackathons for Cyberphysical System Security Research: Putting CPS testbed platforms to good use

A challenge is to develop cyber-physical system scenarios that reflect t...
This week in AI

Get the week's most popular data science and artificial intelligence research sent straight to your inbox every Saturday.