A polytope-based approach to measure the impact of events against critical infrastructures

详细信息    查看全文

• 作者：G. Gonzalez-Granadillo ; ^{gustavo.gonzalez_granadillo@telecom-sudparis.eu" class="auth_mail" title="E-mail the corresponding author} ; J. Garcia-Alfaro ^{joaquin.garcia_alfaro@telecom-sudparis.eu" class="auth_mail" title="E-mail the corresponding author} ; H. Debar ^{herve.debar@telecom-sudparis.eu" class="auth_mail" title="E-mail the corresponding author}
• 关键词：Geometrical model ; Polytope ; Impact measurement ; Multiple dimensions ; Critical infrastructures ; SCADA
• 刊名：Journal of Computer and System Sciences
• 出版年：2017
• 出版时间：February 2017
• 年：2017
• 卷：83
• 期：1
• 页码：3-21
• 全文大小：2760 K

文摘

This paper provides a method to calculate the impact of cyber attacks and security countermeasures in a multi-dimensional coordinate system. The method considers the simulation of services, attacks and countermeasures in at least one dimensional coordinate system, the projection of which originates geometrical instances (e.g., lines, squares, rectangles, hyper-cubes). Such instances are measured through geometrical operations (i.e., length, area, volume, hyper-volume), so that we determine the impact of complex attacks arriving on the system, as well as the impact of the implementation of single and/or multiple countermeasures selected to mitigate the effects of such detected attacks. As a result, we are able to measure the size of cyber events, which allows us to determine the mitigation level of the incidents, as well as, residual risks, and potential collateral damages. A case study of a critical infrastructure system is provided to show the applicability of the model.