A new multiple-risk map approach to solve process plant layout considering safety and economic aspects

Forensic readiness of industrial control systems under stealthy attacks

“…2. To determine what data is at the risk of being lost due to the potentially damaging stealthy attack (P2), i.e., relevant data, we employ the safe PPL ( Quiroz-Pérez et al, 2021 ) to identify areas of the plant that may be affected by the suspected breach. Within these areas, we identify devices and data originating from these devices that can represent potential evidence and that are at risk of being damaged.…”

“…The result is a partition of the land area available for the plant into different sub-areas where safety-critical equipment should be placed, as shown in Fig. 2 ( Quiroz-Pérez et al, 2021 ). In the process industry this design-time activity is referred to as safe Process Plant Layout (PPL) ( Quiroz-Pérez et al, 2021 ).…”

“…2 ( Quiroz-Pérez et al, 2021 ). In the process industry this design-time activity is referred to as safe Process Plant Layout (PPL) ( Quiroz-Pérez et al, 2021 ). To reduce the chance of damage spreading from one area into another, protection devices can be installed ( Penteado and Ciric, 1996 ).…”

“…In the TEP example ( Fig. 2 ), we assume that the equipment running the safety-critical processes is geographically distributed according to a safe PPL design ( Quiroz-Pérez et al, 2021 ). In this case, if damage occurs in the reactor for instance, then we assume that the damage will be restricted to the control devices located in the vicinity of the reactor (e.g., a PLC implementing the reactor's temperature control), and will not extend to devices elsewhere.…”

“…While this may not reveal such attacks, it can identify conditions under which a system can be damaged and, thus, relevant data should be collected. To identify relevant data which is also at most risk of being damaged, we propose a technique that relies on the geographical layout of the system, safe Process Plant Layout (PPL) ( Quiroz-Pérez et al, 2021 ). To reduce the real-time data collection overhead, we propose a decision-theoretic framework to decide whether the identified data is "worth" collecting based on a trade-off between collection cost and the expected damage that can be caused by the attack.…”