Using Discrete Event Simulation to Model Attacker Interactions with Cyber and Physical Security Systems

Perkins, Casey; Muller, George

doi:10.1016/j.procs.2015.09.199

Title: Using Discrete Event Simulation to Model Attacker Interactions with Cyber and Physical Security Systems

Abstract

The number of connections between physical and cyber security systems is rapidly increasing due to centralized control from automated and remotely connected means. As the number of interfaces between systems continues to grow, the interactions and interdependencies between them cannot be ignored. Historically, physical and cyber vulnerability assessments have been performed independently. This independent evaluation omits important aspects of the integrated system, where the impacts resulting from malicious or opportunistic attacks are not easily known or understood. Here, we describe a discrete event simulation model that uses information about integrated physical and cyber security systems, attacker characteristics and simple response rules to identify key safeguards that limit an attacker's likelihood of success. Key features of the proposed model include comprehensive data generation to support a variety of sophisticated analyses, and full parameterization of safeguard performance characteristics and attacker behaviours to evaluate a range of scenarios. Lastly, we also describe the core data requirements and the network of networks that serves as the underlying simulation structure.

Authors:

Perkins, Casey ^[1]; Muller, George ^[1]

Pacific Northwest National Lab. (PNNL), Richland, WA (United States)

Publication Date:: Thu Oct 08 00:00:00 EDT 2015

Research Org.:: Pacific Northwest National Laboratory (PNNL), Richland, WA (United States)

Sponsoring Org.:: USDOE

OSTI Identifier:: 1347710

Report Number(s):: PNNL-24335
Journal ID: ISSN 1877-0509; PII: S187705091503029X

Grant/Contract Number:: AC0576RL01830

Resource Type:: Accepted Manuscript

Journal Name:: Procedia Computer Science

Additional Journal Information:: Journal Volume: 61; Journal Issue: C; Journal ID: ISSN 1877-0509

Publisher:: Elsevier

Country of Publication:: United States

Language:: English

Subject:: 97 MATHEMATICS AND COMPUTING; 98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL PROTECTION; Cyber-physical systems; vulnerability assessment; discrete event simulation; risk analysis

Citation Formats


                    Perkins, Casey, and Muller, George. Using Discrete Event Simulation to Model Attacker Interactions with Cyber and Physical Security Systems.  United States: N. p., 2015. 
Web.  doi:10.1016/j.procs.2015.09.199.

Copy to clipboard


                    Perkins, Casey, & Muller, George. Using Discrete Event Simulation to Model Attacker Interactions with Cyber and Physical Security Systems.  United States.  https://doi.org/10.1016/j.procs.2015.09.199

Copy to clipboard


                    Perkins, Casey, and Muller, George. Thu .  
"Using Discrete Event Simulation to Model Attacker Interactions with Cyber and Physical Security Systems".  United States.  https://doi.org/10.1016/j.procs.2015.09.199.  https://www.osti.gov/servlets/purl/1347710.

Copy to clipboard


                    
@article{osti_1347710,

  title        = {Using Discrete Event Simulation to Model Attacker Interactions with Cyber and Physical Security Systems},

  author       = {Perkins, Casey and Muller, George},

  abstractNote = {The number of connections between physical and cyber security systems is rapidly increasing due to centralized control from automated and remotely connected means. As the number of interfaces between systems continues to grow, the interactions and interdependencies between them cannot be ignored. Historically, physical and cyber vulnerability assessments have been performed independently. This independent evaluation omits important aspects of the integrated system, where the impacts resulting from malicious or opportunistic attacks are not easily known or understood. Here, we describe a discrete event simulation model that uses information about integrated physical and cyber security systems, attacker characteristics and simple response rules to identify key safeguards that limit an attacker's likelihood of success. Key features of the proposed model include comprehensive data generation to support a variety of sophisticated analyses, and full parameterization of safeguard performance characteristics and attacker behaviours to evaluate a range of scenarios. Lastly, we also describe the core data requirements and the network of networks that serves as the underlying simulation structure.},

  doi          = {10.1016/j.procs.2015.09.199},

  journal      = {Procedia Computer Science},

  number       = C,

  volume       = 61,

  place        = {United States},

  year         = {Thu Oct 08 00:00:00 EDT 2015},

  month        = {Thu Oct 08 00:00:00 EDT 2015}

}

Copy to clipboard

Journal Article:

Free Publicly Available Full Text

Accepted Manuscript (DOE)

Publisher's Version of Record

https://doi.org/10.1016/j.procs.2015.09.199

Other availability

Search WorldCat to find libraries that may hold this journal

Citation Metrics:

Cited by: 3 works

Citation information provided by
Web of Science

Figures / Tables:

Figure 1: Graph representation of integrated cyber-physical system.

All figures and tables (4 total)

Save / Share:

Export Metadata

Save to My Library

Works referenced in this record:

On the Definition of Vulnerabilities in Measuring Risks to Infrastructures
journal, April 2006

Haimes, Yacov Y.
Risk Analysis, Vol. 26, Issue 2
DOI: 10.1111/j.1539-6924.2006.00755.x

Infrastructure Vulnerability Assessment Model (I-VAM)
journal, June 2007

Ezell, Barry Charles
Risk Analysis, Vol. 27, Issue 3
DOI: 10.1111/j.1539-6924.2007.00907.x

Discrete-event simulation for the design and evaluation of physical protection systems
conference, January 1998

Jordan, S. E.; Snell, M. K.; Madsen, M. M.
IEEE Winter Simulation Conference, 1998 Winter Simulation Conference. Proceedings (Cat. No.98CH36274)
DOI: 10.1109/WSC.1998.745088

A survey of Cyber-Physical Systems
conference, November 2011

Shi, Jianhua; Wan, Jiafu; Yan, Hehua
Signal Processing (WCSP 2011), 2011 International Conference on Wireless Communications and Signal Processing (WCSP)
DOI: 10.1109/WCSP.2011.6096958

Petri Net Modeling of Cyber-Physical Attacks on Smart Grid
journal, December 2011

Chen, Thomas M.; Sanchez-Aarnoutse, Juan Carlos; Buford, John
IEEE Transactions on Smart Grid, Vol. 2, Issue 4
DOI: 10.1109/TSG.2011.2160000

Cyber–Physical System Security for the Electric Power Grid
journal, January 2012

Sridhar, Siddharth; Hahn, Adam; Govindarasu, Manimaran
Proceedings of the IEEE, Vol. 100, Issue 1
DOI: 10.1109/JPROC.2011.2165269

Modeling cyber and physical interdependencies - Application in ICT and power grids
conference, March 2009

HadjSaid, N.; Tranchita, C.; Rozel, B.
2009 IEEE/PES Power Systems Conference and Exposition (PSCE)
DOI: 10.1109/psce.2009.4840183

On the Definition of Vulnerabilities in Measuring Risks to Infrastructures
journal, April 2006

Haimes, Yacov Y.
Risk Analysis, Vol. 26, Issue 2
DOI: 10.1111/j.1539-6924.2006.00755.x

Infrastructure Vulnerability Assessment Model (I-VAM)
journal, June 2007

Ezell, Barry Charles
Risk Analysis, Vol. 27, Issue 3
DOI: 10.1111/j.1539-6924.2007.00907.x

Works referencing / citing this record:

Literature review of Industry 4.0 and related technologies
journal, July 2018

Oztemel, Ercan; Gursev, Samet
Journal of Intelligent Manufacturing, Vol. 31, Issue 1
DOI: 10.1007/s10845-018-1433-8

Figures / Tables found in this record:

Figures/Tables have been extracted from DOE-funded journal article accepted manuscripts.

Similar Records in DOE PAGES and OSTI.GOV collections:

Evaluation Report on "The Department's Unclassified Cyber Security Program"

Technical Report

Industry experts report that security challenges and threats are continually evolving as malicious activity has become more web-based and attackers are able to rapidly adapt their attack methods. In addition, the number of data breaches continues to rise. In an effort to mitigate and address threats and protect valuable information, the Department of Energy anticipated spending about $275 million in Fiscal Year (FY) 2009 to implement cyber security measures necessary to protect its information technology resources. These systems and data are designed to support the Department's mission and business lines of energy security, nuclear security, scientific discovery and innovation, andmore »« less
https://doi.org/10.2172/967831

Full Text Available
Cyber/Physical Security Vulnerability Assessment Integration

Conference MacDonald, Douglas G. ; Clements, Samuel L. ; Patrick, Scott W. ; ...

Securing high value and critical assets is one of the biggest challenges facing this nation and others around the world. In modern integrated systems, there are four potential modes of attack available to an adversary: • physical only attack, • cyber only attack, • physical-enabled cyber attack, • cyber-enabled physical attack. Blended attacks involve an adversary working in one domain to reduce system effectiveness in another domain. This enables the attacker to penetrate further into the overall layered defenses. Existing vulnerability assessment (VA) processes and software tools which predict facility vulnerabilities typically evaluate the physical and cyber domains separately. Vulnerabilitiesmore »« less
https://doi.org/10.1109/ISGT.2013.6497883
Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies

Journal Article Zografopoulos, Ioannis ; Ospina, Juan ; Liu, Xiaorui ; ... - IEEE Access

Cyber-physical systems (CPS) are interconnected architectures that employ analog and digital components as well as communication and computational resources for their operation and interaction with the physical environment. CPS constitute the backbone of enterprise (e.g., smart cities), industrial (e.g., smart manufacturing), and critical infrastructure (e.g., energy systems). Thus, their vital importance, interoperability, and plurality of computing devices make them prominent targets for malicious attacks aiming to disrupt their operations. Attacks targeting cyber-physical energy systems (CPES), given their mission-critical nature within the power grid infrastructure, can lead to disastrous consequences. The security of CPES can be enhanced by leveraging testbed capabilitiesmore »« less
https://doi.org/10.1109/ACCESS.2021.3058403
Support for Reactor Operators in Case of Cyber-Security Threats (NEUP Final Report)

Technical Report Smidts, Carol ; Ray, Indrajit ; Zhu, Quanyan ; ...

Increasing use of digital technology in nuclear power plants (NPPs) poses cyber-security as a crucial threat to public safety and to continuous energy production. Cyber-security risks are comprised of complex known and unknown interactions between various entities, system vulnerabilities, network protocols, human users and malicious attacks. There is little understanding or research geared towards plant operators’ response under cyber-security threats and operational procedures to cope with such threats. This is particularly critical when a cyber-security event masquerades as a safety incident or an evolving accident. Instead of leading operators to the remediation of the accident, the masked cyber event maymore »« less
https://doi.org/10.2172/1581617

Full Text Available
Finite Energy and Bounded Actuator Attacks on Cyber-Physical Systems

Conference Djouadi, Seddik M ; Melin, Alexander M ; Ferragut, Erik M ; ...

As control system networks are being connected to enterprise level networks for remote monitoring, operation, and system-wide performance optimization, these same connections are providing vulnerabilities that can be exploited by malicious actors for attack, financial gain, and theft of intellectual property. Much effort in cyber-physical system (CPS) protection has focused on protecting the borders of the system through traditional information security techniques. Less effort has been applied to the protection of cyber-physical systems from intelligent attacks launched after an attacker has defeated the information security protections to gain access to the control system. In this paper, attacks on actuator signalsmore »« less
Full Text Available

Similar Records

Title: Using Discrete Event Simulation to Model Attacker Interactions with Cyber and Physical Security Systems

Abstract

Citation Formats

Figures / Tables:

On the Definition of Vulnerabilities in Measuring Risks to Infrastructures journal, April 2006

Infrastructure Vulnerability Assessment Model (I-VAM) journal, June 2007

Discrete-event simulation for the design and evaluation of physical protection systems conference, January 1998

A survey of Cyber-Physical Systems conference, November 2011

Petri Net Modeling of Cyber-Physical Attacks on Smart Grid journal, December 2011

Cyber–Physical System Security for the Electric Power Grid journal, January 2012

Modeling cyber and physical interdependencies - Application in ICT and power grids conference, March 2009

On the Definition of Vulnerabilities in Measuring Risks to Infrastructures journal, April 2006

Infrastructure Vulnerability Assessment Model (I-VAM) journal, June 2007

Literature review of Industry 4.0 and related technologies journal, July 2018

On the Definition of Vulnerabilities in Measuring Risks to Infrastructures
journal, April 2006

Infrastructure Vulnerability Assessment Model (I-VAM)
journal, June 2007

Discrete-event simulation for the design and evaluation of physical protection systems
conference, January 1998

A survey of Cyber-Physical Systems
conference, November 2011

Petri Net Modeling of Cyber-Physical Attacks on Smart Grid
journal, December 2011

Cyber–Physical System Security for the Electric Power Grid
journal, January 2012

Modeling cyber and physical interdependencies - Application in ICT and power grids
conference, March 2009

On the Definition of Vulnerabilities in Measuring Risks to Infrastructures
journal, April 2006

Infrastructure Vulnerability Assessment Model (I-VAM)
journal, June 2007

Literature review of Industry 4.0 and related technologies
journal, July 2018