Failure Impact Analysis of Key Management in AMI Using Cybernomic Situational Assessment (CSA)

Conference · Tue Jan 01 04:00:00 EST 2013

OSTI ID:1073662

Abercrombie, Robert K ^[1]; Sheldon, Frederick T ^[1]; Hauser, Katie R ^[1]; Lantz, Margaret W ^[1]; Mili, Ali ^[2]

---

1. ORNL
2. New Jersey Insitute of Technology

In earlier work, we presented a computational framework for quantifying the security of a system in terms of the average loss a stakeholder stands to sustain as a result of threats to the system. We named this system, the Cyberspace Security Econometrics System (CSES). In this paper, we refine the framework and apply it to cryptographic key management within the Advanced Metering Infrastructure (AMI) as an example. The stakeholders, requirements, components, and threats are determined. We then populate the matrices with justified values by addressing the AMI at a higher level, rather than trying to consider every piece of hardware and software involved. We accomplish this task by leveraging the recently established NISTR 7628 guideline for smart grid security. This allowed us to choose the stakeholders, requirements, components, and threats realistically. We reviewed the literature and selected an industry technical working group to select three representative threats from a collection of 29 threats. From this subset, we populate the stakes, dependency, and impact matrices, and the threat vector with realistic numbers. Each Stakeholder s Mean Failure Cost is then computed.

• Research Organization: Oak Ridge National Laboratory (ORNL)
• Sponsoring Organization: ORNL work for others
• DOE Contract Number: AC05-00OR22725
• OSTI ID: 1073662
• Country of Publication: United States
• Language: English

Related Subjects

Algorithms
Cyber Security Metrics
Design
Economics
Experimentation
Information Security
Measurement
Performance
Reliability
Risk Management
Security
Theory
Verification