1. |
- Assenza, Giacomo, et al.
(författare)
-
White Paper on Industry Experiences in Critical Information Infrastructure Security : A Special Session at CRITIS 2019
- 2020
-
Ingår i: Critical Information Infrastructures Security14th International Conference, CRITIS 2019. - Cham : Springer. - 9783030376697 - 9783030376703 ; , s. 197-207
-
Bokkapitel (refereegranskat)abstract
- The security of critical infrastructures is of paramount importance nowadays due to the growing complexity of components and applications. This paper collects the contributions to the industry dissemination session within the 14th International Conference on Critical Information Infrastructures Security (CRITIS 2019). As such, it provides an overview of recent practical experience reports in the field of critical infrastructure protection (CIP), involving major industry players. The set of cases reported in this paper includes the usage of serious gaming for training infrastructure operators, integrated safety and security management in the chemical/process industry, risks related to the cyber-economy for energy suppliers, smart troubleshooting in the Internet of Things (IoT), as well as intrusion detection in power distribution Supervisory Control And Data Acquisition (SCADA). The session has been organized to stimulate an open scientific discussion about industry challenges, open issues and future opportunities in CIP research.
|
|
2. |
- Jiang, Yuning, 1993-, et al.
(författare)
-
Cyber-Physical Systems Security Based on A Cross-Linked and Correlated Vulnerability Database
- 2019
-
Ingår i: Critical Information Infrastructures Security. - Cham : Springer. - 9783030376697 - 9783030376703 ; , s. 71-82
-
Bokkapitel (refereegranskat)abstract
- Recent advances in data analytics prompt dynamic datadriven vulnerability assessments whereby data contained from vulnerabilityalert repositories as well as from Cyber-physical System (CPS) layer networks and standardised enumerations. Yet, current vulnerability assessment processes are mostly conducted manually. However, the huge volume of scanned data requires substantial information processing and analytical reasoning, which could not be satisfied considering the imprecision of manual vulnerability analysis. In this paper, we propose to employ a cross-linked and correlated database to collect, extract, filter and visualise vulnerability data across multiple existing repositories, whereby CPS vulnerability information is inferred. Based on our locally-updated database, we provide an in-depth case study on gathered CPS vulnerability data, to explore the trends of CPS vulnerability. In doing so, we aim to support a higher level of automation in vulnerability awareness and back risk-analysis exercises in critical infrastructures (CIs) protection.
|
|
3. |
- van Laere, Joeri, 1974-, et al.
(författare)
-
Mitigating Escalation of Cascading Effects of a Payment Disruption Across Other Critical Infrastructures : Lessons Learned in 15 Simulation-Games
- 2020
-
Ingår i: Critical Information Infrastructures Security. - Cham : Springer. - 9783030376697 - 9783030376703 ; , s. 110-121
-
Bokkapitel (refereegranskat)abstract
- A disruption in one critical infrastructure can quickly lead to cascading effects in several other ones. Much research has been done to analyze dependencies between different critical infrastructures, but little is known about how to mitigate escalation and cascading effects across several critical infrastructures, i.e. how to develop collective critical infrastructure resilience. This research presents the results of 15 simulation-games where groups of 6 to 8 field experts from different sectors were challenged to collaboratively manage a disruption in the payment system that quickly affected food distribution, fuel distribution, transport, health care et cetera. Teams discussed possible strategies, which next were implemented in a computer simulation. Teams could influence the sequence of events on 4 decision points during a 10 day scenario, and play the same scenario several times to test alternative solutions. Each simulation-game session lasted a full day. Data analysis involved the recorded team discussions as well as computer simulation logs of the implemented decisions and their impacts. The results show how escalation and the severity of cascading effects largely depends on the quality of the early crisis response and not so much on the initial disruption. Also, it is shown how cross sectorial collaboration is required. Responses where groups focus too much on cascading effects in one area lead too poor overall performance for society at large. Groups tend to overbalance their mitigating strategies initially, until they arrive at a more balanced strategy that covers challenges in several different critical infrastructures from an integral perspective.
|
|