CIPRNet Bibliography of CIP literature

Keywords: Critical infrastructures; Cascading failures; Dependency risk graphs; Time analysis; Resilience; Fuzzy logic

Abstract: Abstract Dependency analysis of critical infrastructures is a computationally intensive problem when dealing with large-scale, cross-sectoral, cascading and common-cause failures. The problem intensifies when attempting a dynamic, time-based dependency analysis. This paper extends a previous graph-based risk analysis methodology to dynamically assess the evolution of cascading failures over time. Various growth models are employed to capture slow, linear and rapidly evolving effects, but instead of using static projections, the evolution of each dependency is "objectified" by a fuzzy system that also considers the effects of nearby dependencies. To achieve this, the impact (and, eventually, risk) of each dependency is quantified on the time axis into a form of many-valued logic. In addition, the methodology is extended to analyze major failures triggered by concurrent common-cause cascading events. A critical infrastructure dependency analysis tool, CIDA, that implements the extended risk-based methodology is described. CIDA is designed to assist decision makers in proactively analyzing dynamic and complex dependency risk paths in two ways: (i) identifying potentially underestimated low risk dependencies and reclassifying them to a higher risk category before they are realized; and (ii) simulating the effectiveness of alternative mitigation controls with different reaction times. Thus, the CIDA tool can be used to evaluate alternative defense strategies for complex, large-scale and multi-sectoral dependency scenarios and to assess their resilience in a cost-effective manner.

Keywords: Information Sharing,cyber security

Keywords: Critical infrastructure protection; CIPRNet project; Decision support; Services; Modelling and simulation

Keywords: smart, meter, anomaly, attack, detection, auto, regressive, moving, average, integrated, electricity, theft, cyber-physical, ARIMA, ARMA, forecasting, critical, infrastructure, security, measurements

Abstract: Smart meters are increasingly being deployed to measure electricity consumption of residential as well as non-residential consumers. The readings reported by these meters form a time series, which is stored at electric utility servers for billing purposes. Invalid readings may be reported because of malicious compromise of the smart meters themselves, or of the network infrastructure that supports their communications. Although many of these meters come equipped with encrypted communications, they may potentially be vulnerable to cyber intrusions. Therefore, there is a need for an additional layer of validation to detect these intrusion attempts. In this paper, we make three contributions. First, we show that the ARMA model proposed in the anomaly detection literature is unsuitable for electricity consumption as most consumers exhibit non-stationary consumption behavior. We use automated model fitting methods from the literature to show that first-order differencing of these non-stationary readings makes them weakly stationary. Thus, we propose the use of ARIMA forecasting methods for validating consumption readings. Second, we evaluate the effectiveness of ARIMA forecasting in the context of a specific attack model, where smart meter readings are modifed to steal electricity. Third, we propose additional checks on mean and variance that can mitigate the total amount of electricity that can be stolen by an attacker by 77:46%. Our evaluation is based on a real, open dataset of readings obtained from 450 consumer meters.

Note: Winning artcle od the 2015 CIPRNet Young CRITIS Award (CYCA)

Keywords: Climate adaptation,ICT,infrastructure

Keywords: critical infrastructures, water supply systems, fault detection, testbed, modelling, discrete-time systems

Abstract: In this paper we first introduce a testbed that is able to emulate the operation and common faults of a water supply system, as well as its interaction with a SCADA system. Then we implement an online fault detection algorithm based on a fault diagnosis architecture for nonlinear uncertain discrete-time systems, that we apply and test with the testbed. We finally present some experimental results illustrating the effectiveness of this approach.

Note: Winning artcle od the 2014 CIPRNet Young CRITIS Award (CYCA)

Keywords: Cyber security

Note: Conference: New York, USA; Aug 17-21, 2014

Keywords: Critical Infrastructure Protection, Critical Information Infrastructures, Information Systems, Networks, Risk Assessment, Security

Note: Pre-proceedings, 231 pages. Amsterdam, The Netherlands, September 16-18, 2013

Note: last accessed 2013-01-15

Note: Last accessed 2013-01-16

Keywords: dblp

Keywords: Drinking water

Abstract: International studies have shown that information security for process control systems, in particular SCADA, is weak. Many of the critical infrastructure (CI) services critically depend on process control systems. Therefore, any vulnerability in the protection of process control systems in CI may result in serious consequences for citizens and society. In order to understand their sector-wide security posture, the drinking water sector in The Netherlands benchmarked the information security of their process control environment. Large differences in the individual security postures of the ten drinking water companies were found. Good Practices for SCADA security were developed based upon the benchmark results. This paper discusses the simple but effective approach taken to perform the benchmark, the way the results were reported to the drinking water companies, and the way in which the SCADA information security good practices were developed. Apart from some high-level indications of areas requiring more security attention, no actual security posture results are presented in this paper since the study data contain company and national sensitive information. For the same reason, the figures in this paper are based on artificial data.

Keywords: Ontology

Note: last accessed 2010-05-05

Note: last accessed 2010-05-05

Keywords: Heterogeneous infrastructures; interdependencies; simulation

Keywords: Modeling; simulation; geospatial analysis; ontological analysis

Keywords: Modeling; simulation; ontology; federated environment

Keywords: Critical Infrastructure Protection, Critical Information Infrastructures, Information Systems, Networks, Risk Assessment, Security

Keywords: dblp

Keywords: Computer Networks Simulation, Distributed Simulation, Federated Simulators, Frame Relay, Parallel Simulation

Keywords: Simulation, distributed simulation, networks

Keywords: Access protocols;Command and control systems;Project management;Service oriented architecture;Simple object access protocol;TCPIP;Transport protocols;Web and internet services;Web services;XML;