Sökning: id:"swepub:oai:DiVA.org:his-21546" >
Vulnerability Analy...
Vulnerability Analysis for Critical Infrastructures
-
- Jiang, Yuning, 1993- (författare)
- Högskolan i Skövde,Institutionen för informationsteknologi,Forskningsmiljön Informationsteknologi,Distribuerade realtidssystem (DRTS), Distributed Real-Time Systems
-
- Atif, Yacine, Professor, 1967- (preses)
- Högskolan i Skövde,Institutionen för informationsteknologi,Forskningsmiljön Informationsteknologi
-
- Ding, Jianguo, Associate Professor, 1968- (preses)
- Högskolan i Skövde,Institutionen för informationsteknologi,Forskningsmiljön Informationsteknologi
-
visa fler...
-
- Jeusfeld, Manfred A., Professor (preses)
- Högskolan i Skövde,Institutionen för informationsteknologi,Forskningsmiljön Informationsteknologi
-
- Lindström, Birgitta, Associate Professor (preses)
- Högskolan i Skövde,Institutionen för informationsteknologi
-
- Brax, Christoffer, PhD (preses)
- Combitech
-
- Katsikas, Sokratis, Professor (opponent)
- Norwegian University of Science and Technology
-
visa färre...
-
(creator_code:org_t)
- ISBN 9789198790603
- Skövde : University of Skövde, 2022
- Engelska xxv, 278 s.
-
Serie: Dissertation Series ; 46
- Relaterad länk:
-
https://his.diva-por... (primary) (Raw object)
-
visa fler...
-
https://urn.kb.se/re...
-
visa färre...
Abstract
Ämnesord
Stäng
- The rapid advances in information and communication technology enable a shift from diverse systems empowered mainly by either hardware or software to cyber-physical systems (CPSs) that are driving Critical infrastructures (CIs), such as energy and manufacturing systems. However, alongside the expected enhancements in efficiency and reliability, the induced connectivity exposes these CIs to cyberattacks exemplified by Stuxnet and WannaCry ransomware cyber incidents. Therefore, the need to improve cybersecurity expectations of CIs through vulnerability assessments cannot be overstated. Yet, CI cybersecurity has intrinsic challenges due to the convergence of information technology (IT) and operational technology (OT) as well as the crosslayer dependencies that are inherent to CPS based CIs. Different IT and OT security terminologies also lead to ambiguities induced by knowledge gaps in CI cybersecurity. Moreover, current vulnerability-assessment processes in CIs are mostly subjective and human-centered. The imprecise nature of manual vulnerability assessment operations and the massive volume of data cause an unbearable burden for security analysts. Latest advances in machine-learning (ML) based cybersecurity solutions promise to shift such burden onto digital alternatives. Nevertheless, the heterogeneity, diversity and information gaps in existing vulnerability data repositories hamper accurate assessments anticipated by these ML-based approaches. Therefore, a comprehensive approach is envisioned in this thesis to unleash the power of ML advances while still involving human operators in assessing cybersecurity vulnerabilities within deployed CI networks.Specifically, this thesis proposes data-driven cybersecurity indicators to bridge vulnerability management gaps induced by ad-hoc and subjective auditing processes as well as to increase the level of automation in vulnerability analysis. The proposed methodology follows design science research principles to support the development and validation of scientifically-sound artifacts. More specifically, the proposed data-driven cybersecurity architecture orchestrates a range of modules that include: (i) a vulnerability data model that captures a variety of publicly accessible cybersecurity-related data sources; (ii) an ensemble-based ML pipeline method that self-adjusts to the best learning models for given cybersecurity tasks; and (iii) a knowledge taxonomy and its instantiated power grid and manufacturing models that capture CI common semantics of cyberphysical functional dependencies across CI networks in critical societal domains. This research contributes data-driven vulnerability analysis approaches that bridge the knowledge gaps among different security functions, such as vulnerability management through related reports analysis. This thesis also correlates vulnerability analysis findings to coordinate mitigation responses in complex CIs. More specifically, the vulnerability data model expands the vulnerability knowledge scope and curates meaningful contexts for vulnerability analysis processes. The proposed ML methods fill information gaps in vulnerability repositories using curated data while further streamlining vulnerability assessment processes. Moreover, the CI security taxonomy provides disciplined and coherent support to specify and group semanticallyrelated components and coordination mechanisms in order to harness the notorious complexity of CI networks such as those prevalent in power grids and manufacturing infrastructures. These approaches learn through interactive processes to proactively detect and analyze vulnerabilities while facilitating actionable insights for security actors to make informed decisions.
Ämnesord
- TEKNIK OCH TEKNOLOGIER -- Elektroteknik och elektronik -- Datorsystem (hsv//swe)
- ENGINEERING AND TECHNOLOGY -- Electrical Engineering, Electronic Engineering, Information Engineering -- Computer Systems (hsv//eng)
- TEKNIK OCH TEKNOLOGIER -- Elektroteknik och elektronik -- Inbäddad systemteknik (hsv//swe)
- ENGINEERING AND TECHNOLOGY -- Electrical Engineering, Electronic Engineering, Information Engineering -- Embedded Systems (hsv//eng)
- TEKNIK OCH TEKNOLOGIER -- Elektroteknik och elektronik -- Kommunikationssystem (hsv//swe)
- ENGINEERING AND TECHNOLOGY -- Electrical Engineering, Electronic Engineering, Information Engineering -- Communication Systems (hsv//eng)
- TEKNIK OCH TEKNOLOGIER -- Elektroteknik och elektronik -- Annan elektroteknik och elektronik (hsv//swe)
- ENGINEERING AND TECHNOLOGY -- Electrical Engineering, Electronic Engineering, Information Engineering -- Other Electrical Engineering, Electronic Engineering, Information Engineering (hsv//eng)
Nyckelord
- critical infrastructure cybersecurity
- vulnerability assessment
- vulnerability quantification
- computational intelligence in cybersecurity
- cyber-physical system
- INF303 Informationssäkerhet
- INF303 Information Security
- INF301 Data Science
- INF301 Data Science
- Distribuerade realtidssystem (DRTS)
- Distributed Real-Time Systems
Publikations- och innehållstyp
- vet (ämneskategori)
- dok (ämneskategori)
Hitta via bibliotek
Till lärosätets databas
- Av författaren/redakt...
-
Jiang, Yuning, 1 ...
-
Atif, Yacine, Pr ...
-
Ding, Jianguo, A ...
-
Jeusfeld, Manfre ...
-
Lindström, Birgi ...
-
Brax, Christoffe ...
-
visa fler...
-
Katsikas, Sokrat ...
-
visa färre...
- Om ämnet
-
- TEKNIK OCH TEKNOLOGIER
-
TEKNIK OCH TEKNO ...
-
och Elektroteknik oc ...
-
och Datorsystem
-
- TEKNIK OCH TEKNOLOGIER
-
TEKNIK OCH TEKNO ...
-
och Elektroteknik oc ...
-
och Inbäddad systemt ...
-
- TEKNIK OCH TEKNOLOGIER
-
TEKNIK OCH TEKNO ...
-
och Elektroteknik oc ...
-
och Kommunikationssy ...
-
- TEKNIK OCH TEKNOLOGIER
-
TEKNIK OCH TEKNO ...
-
och Elektroteknik oc ...
-
och Annan elektrotek ...
- Delar i serien
- Dissertation Ser ...
- Av lärosätet
-
Högskolan i Skövde