A Framework for Development of Risk-Informed Autonomous Adaptive Cyber Controller

Veeramany, Arun; Hutton, William J.; Sridhar, Siddharth; Gourisetti, Sri Nikhil G.; Coles, Garill A.; Skare, Paul M.

doi:10.1115/1.4043040

Title: A Framework for Development of Risk-Informed Autonomous Adaptive Cyber Controller

Journal Article · Tue Dec 31 00:00:00 EST 2019 · Journal of Computing and Information Science in Engineering

DOI:https://doi.org/10.1115/1.4043040· OSTI ID:1597086

^[1]; Hutton, William J. ^[1]; Sridhar, Siddharth ^[1];

^[1]; Coles, Garill A. ^[1]; Skare, Paul M. ^[1]

BATTELLE (PACIFIC NW LAB)

This article details a framework and methodology to risk-inform the decisions of an unsupervised cyber controller. A risk assessment methodology within this framework uses a combination of fault trees, event trees and attack graphs to trace and map cyber elements with business processes. The methodology attempts to prevent and mitigate cyberattacks by using adaptive controllers that proactively reconfigure a network based on actionable risk estimates. The estimates are based on vulnerabilities and potential business consequences. A generic enterprise control system is used to demonstrate the wide applicability of the methodology. In addition, data needs, implementation, and potential pitfalls are discussed.

Cite

Export

Save

Research Organization:: Pacific Northwest National Lab. (PNNL), Richland, WA (United States)

Sponsoring Organization:: USDOE

DOE Contract Number:: AC05-76RL01830

OSTI ID:: 1597086

Report Number(s):: PNNL-SA-129745

Journal Information:: Journal of Computing and Information Science in Engineering, Vol. 19, Issue 4

Country of Publication:: United States

Language:: English

References (22)

Risk Management of Autonomous Marine Systems and Operations Utne, Ingrid Bouwer; Sørensen, Asgeir J.; Schjølberg, Ingrid ASME 2017 36th International Conference on Ocean, Offshore and Arctic Engineering, Volume 3B: Structures, Safety and Reliability https://doi.org/10.1115/OMAE2017-61645	conference	September 2017
Cyber Security Issues in Navigation Systems of Marine Vessels From a Control Perspective Hassani, Vahid; Crasta, Naveena; Pascoal, António M. ASME 2017 36th International Conference on Ocean, Offshore and Arctic Engineering, Volume 7B: Ocean Engineering https://doi.org/10.1115/OMAE2017-61771	conference	September 2017
Vulnerabilities of Cyber-Physical Linear Control Systems to Sophisticated Attacks Radisavljevic-Gajic, Verica; Park, Seri; Chasaki, Danai ASME 2017 Dynamic Systems and Control Conference, Volume 2: Mechatronics; Estimation and Identification; Uncertain Systems and Robustness; Path Planning and Motion Control; Tracking Control Systems; Multi-Agent and Networked Systems; Manufacturing; Intelligent Transportation and Vehicles; Sensors and Actuators; Diagnostics and Detection; Unmanned, Ground and Surface Robotics; Motion and Vibration Control Applications https://doi.org/10.1115/DSCC2017-5386	conference	November 2017
Cyber Security Assessment of Component Off-the-Shelf Based NPP I&C System Using IMECA Technique Zelinko, Ilona; Kharchenko, Vyacheslav; Leontiev, Konstantin 2017 25th International Conference on Nuclear Engineering, Volume 9: Student Paper Competition https://doi.org/10.1115/ICONE25-67120	conference	October 2017
Internet of Things (IoT)-Based Apparatus and Method for Rail Crossing Alerting of Static or Dynamic Rail Track Intrusions Minoli, Daniel; Occhiogrosso, Benedict 2017 Joint Rail Conference https://doi.org/10.1115/JRC2017-2304	conference	July 2017
SFTA-Based Approach for Safety/Reliability Analysis of Operational Use-Cases in Cyber-Physical Systems Oveisi, Shahrzad; Ravanmehr, Reza Journal of Computing and Information Science in Engineering, Vol. 17, Issue 3 https://doi.org/10.1115/1.4037228	journal	July 2017
Cyber security risk assessment for SCADA and DCS networks Ralston, P. A. S.; Graham, J. H.; Hieb, J. L. ISA Transactions, Vol. 46, Issue 4 https://doi.org/10.1016/j.isatra.2007.04.003	journal	October 2007
On The Quantitative Definition of Risk Kaplan, Stanley; Garrick, B. John Risk Analysis, Vol. 1, Issue 1 https://doi.org/10.1111/j.1539-6924.1981.tb01350.x	journal	March 1981
A review of cyber security risk assessment methods for SCADA systems Cherdantseva, Yulia; Burnap, Pete; Blyth, Andrew Computers & Security, Vol. 56 https://doi.org/10.1016/j.cose.2015.09.009	journal	February 2016
Risk assessment method for cybersecurity of cyber-physical systems based on inter-dependency of vulnerabilities Wu, Wenbo; Kang, Rui; Li, Zi 2015 IEEE International Conference on Industrial Engineering and Engineering Management (IEEM) https://doi.org/10.1109/IEEM.2015.7385921	conference	December 2015
Pra: a Perspective on Strengths, Current Limitations, and Possible Improvements Mosleh, Ali Nuclear Engineering and Technology, Vol. 46, Issue 1 https://doi.org/10.5516/NET.03.2014.700	journal	February 2014
An autonomous control framework for advanced reactors Wood, Richard T.; Upadhyaya, Belle R.; Floyd, Dan C. Nuclear Engineering and Technology, Vol. 49, Issue 5 https://doi.org/10.1016/j.net.2017.07.001	journal	August 2017
Software-defined energy communication networks: From substation automation to future smart grids Cahn, Adam; Hoyos, Juan; Hulse, Matthew 2013 IEEE International Conference on Smart Grid Communications (SmartGridComm) https://doi.org/10.1109/SmartGridComm.2013.6688017	conference	October 2013
Cyber-security in substation automation systems Moreira, Naiara; Molina, Elías; Lázaro, Jesús Renewable and Sustainable Energy Reviews, Vol. 54 https://doi.org/10.1016/j.rser.2015.10.124	journal	February 2016
Cyber Integrated Metrology, Learning and Evaluation System: An Approach Towards Smart Factories Helgoson, Martin; Westlin, Pontus; Kalhori, Vahid ASME 2017 International Mechanical Engineering Congress and Exposition, Volume 2: Advanced Manufacturing https://doi.org/10.1115/IMECE2017-71336	conference	January 2018
Cyber-physical security challenges in manufacturing systems Wells, Lee J.; Camelio, Jaime A.; Williams, Christopher B. Manufacturing Letters, Vol. 2, Issue 2 https://doi.org/10.1016/j.mfglet.2014.01.005	journal	April 2014
A Distributed Intelligence Approach to Using Collaborating Unmanned Aerial Vehicles for Oil Spill Mapping Odonkor, Philip; Ball, Zachary; Chowdhury, Souma ASME 2017 International Design Engineering Technical Conferences and Computers and Information in Engineering Conference, Volume 2A: 43rd Design Automation Conference https://doi.org/10.1115/DETC2017-68320	conference	November 2017
Marine Autonomous Exploration Using a Lidar and SLAM Ueland, Einar S.; Skjetne, Roger; Dahl, Andreas R. ASME 2017 36th International Conference on Ocean, Offshore and Arctic Engineering, Volume 6: Ocean Space Utilization https://doi.org/10.1115/OMAE2017-61880	conference	September 2017
Cloud-Assisted IoT-Based SCADA Systems Security: A Review of the State of the Art and Future Challenges Sajid, Anam; Abbas, Haider; Saleem, Kashif IEEE Access, Vol. 4 https://doi.org/10.1109/ACCESS.2016.2549047	journal	January 2016
Confronting the risks of terrorism: making the right decisions John Garrick, B.; Hall, James E.; Kilger, Max Reliability Engineering & System Safety, Vol. 86, Issue 2 https://doi.org/10.1016/j.ress.2004.04.003	journal	November 2004
Measuring network security using dynamic bayesian network Frigault, Marcel; Wang, Lingyu; Singhal, Anoop Proceedings of the 4th ACM workshop on Quality of protection - QoP '08 https://doi.org/10.1145/1456362.1456368	conference	January 2008
Fault tree analysis: A survey of the state-of-the-art in modeling, analysis and tools Ruijters, Enno; Stoelinga, Mariëlle Computer Science Review, Vol. 15-16 https://doi.org/10.1016/j.cosrev.2015.03.001	journal	February 2015

Similar Records

Risk-informed autonomous adaptive cyber controllers

Patent · Tue Dec 21 00:00:00 EST 2021 · OSTI ID:1597086

Veeramany, Arun; Hutton, III, William James; Sridhar, Siddharth; +7 more

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

Other · Mon Aug 01 00:00:00 EDT 2022 · OSTI ID:1597086

Hyder, Burhan

Towards A Theory of Autonomous Reconstitution of Compromised Cyber-Systems

Conference · Tue Nov 12 00:00:00 EST 2013 · OSTI ID:1597086

Ramuhalli, Pradeep; Halappanavar, Mahantesh; Coble, Jamie B.; +1 more

Related Subjects

reconfiguration
fault tree
event tree
attack graph
cybersecurity
controller
adaptive

Title: A Framework for Development of Risk-Informed Autonomous Adaptive Cyber Controller

Citation Formats

References (22)

Similar Records

Related Subjects