A Comprehensive Framework for the Security Risk Management of Cyber-Physical Systems

Abstract

Cyber Physical Systems are facing huge and diverse set of security risks, especially cyber-attacks that can cause disruption to physical services or create a national disaster. Information and communication technology (ICT) has made a remarkable impact on the society. A Cyber Physical System (CPS) relies basically on information and communication technology, which puts the system's assets under certain risks especially cyber ones, and hence they must be kept under control by means of security countermeasures that generate confidence in the use of these assets. And so there is a critical need to give a great attention on the cybersecurity of these systems, which consequently leads to the safety of the physical world. This goal is achieved by adopting a solution that applies processes, plans and actions to prevent or reduce the effects of threats. Traditional IT risk assessment methods can do the job, however, and because of the characteristics of a CPS, it is more efficient to adopt a solution that is wider than a method, and addresses the type, functionalities and complexity of a CPS. This chapter proposes a framework that breaks the restriction to a traditional risk assessment method and encompasses wider set of procedures to achieve a high level strategy that could be adopted in the risk management process, in particular the cybersecurity of cyber-physical systems.

Risk assessment and control selection for cyber-physical systems: a case study on supply chain tracking systems

“…Their framework uses various building blocks that we also apply, such as STRIDE, CVE and CVSS. Furthermore, Mokalled et al [29] proposed a general risk management framework for CPSs focusing on specific characteristics of the CPSs. Rosado et al [30] proposed a risk analysis approach for CPS based on MARISMA.…”

Have You Been a Victim of COVID-19-Related Cyber Incidents? Survey, Taxonomy, and Mitigation Strategies

“…Risk management framework is an effective method to access, mitigate, and evaluate risks associated with the threat. Several risk management frameworks are available such as for scada systems [50] , online services [51] , and cyber physical systems [52] – [54] . Accordingly, a pandemic such as COVID-19 warrants new and rapid framework that can be implemented immediately.…”

The Importance to Manage Data Protection in the Right Way: Problems and Solutions

“…The work done at the company: The main part of the work was done at the Company; it handled the issue of managing data protection in a systematic way, through proposing a Data protection management approach (chapter three), and the shows the ISMS implementing this approach (chapter four) [8]. After that, a comprehensive framework is designed for the security risk management of Cyber physical systems, this framework represents the strategy used to manage the security risk management [9], and it falls inside the ISMS (chapter five).…”

“…Many companies seek to reinforce their security capabilities to better safeguard against cybersecurity threats, so they adopt multi-layered security strategies that include using This chapters describes an approach proposed to aid enterprises, in selecting an applicable SIEM solution.Information and communication technology (ICT) has made a remarkable impact on the society. Companies nowadays rely on information and communication technology which puts their assets under certain risks especially cyber ones, hence they must be kept under control by means of security countermeasures that generate confidence in the use of these assets[9].For example, when a potential issue is detected, SIEM might log it as a new information, generate an alert and instruct other security controls to stop any activity progress. Gartner estimates the SIEM market will grow at a compound annual growth rate (CAGR) of 9.5% between 2016 and 2022, and the worldwide spending on SIEM will reach 3.72 billion dollars[34].…”