A Study on Quantitative Risk Assessment Methods in Security Design for Industrial Control Systems

Kawanishi, Yasuyuki; Nishihara, Hideaki; Souma, Daisuke; Yoshida, Hirotaka; Hata, Yoichi

doi:10.1109/dasc/picom/datacom/cyberscitec.2018.00025

Cited by 6 publications

(7 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…RSS-CWSS_CPS is a risk quantification method based on CWSS which is defined in the ITU-T X.1525 standard [25]. Kawanishi et al first applied CWSS to a data logger in an industrial control system as a TOE and confirmed that small equipment could be evaluated properly [16]. RSS-CWSS_CPS is a redefinition of the method in [16], and uses 8 of 16 metrics of CWSS.…”

Section: Risk Evaluation Methods Rss-cwss_cpsmentioning

confidence: 99%

“…Kawanishi et al first applied CWSS to a data logger in an industrial control system as a TOE and confirmed that small equipment could be evaluated properly [16]. RSS-CWSS_CPS is a redefinition of the method in [16], and uses 8 of 16 metrics of CWSS. The risk score for a threat is calculated by the following equation (2) using CWSS [25].…”

Section: Risk Evaluation Methods Rss-cwss_cpsmentioning

confidence: 99%

“…Kawanishi et al focused on the JASO TP15002 guideline [13] for an interpretation of Common Criteria based security design procedures and used the method of using vulnerability evaluation criteria to quantify risk. They added some perspectives to the guideline and applied them to automotive systems and industrial control systems (ICSs) [14][15] [16] [17]. In that same period, ISO/SAE 21434 is already being standardized for security management, where the requirements (RQs) for threat analysis and risk assessment (TARA) are defined in the chapters 15.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

Kawanishi

Nishihara²,

Yamamoto

et al. 2023

IEICE Trans. Fundamentals

View full text Add to dashboard Cite

Cyber-physical systems, in which ICT systems and field devices are interconnected and interlocked, have become widespread. More threats need to be taken into consideration when designing the security of cyber-physical systems. Attackers may cause damage to the physical world by attacks which exploit vulnerabilities of ICT systems, while other attackers may use the weaknesses of physical boundaries to exploit ICT systems. Therefore, it is necessary to assess such risks of attacks properly. A direct-access attack in the field of automobiles is the latter type of attacks where an attacker connects unauthorized equipment to an in-vehicle network directly and attempts unauthorized access. But it has been considered as less realistic and evaluated less risky than other threats via network entry points by conventional risk assessment methods. We focused on reassessing threats via direct access attacks in proposing effective security design procedures for cyber-physical systems based on a guideline for automobiles, JASO TP15002. In this paper, we focus on "fitting to a specific area or viewpoint" of such a cyber-physical system, and devise a new risk quantification method, RSS-CWSS_CPS based on CWSS, which is also a vulnerability evaluation standard for ICT systems. It can quantify the characteristics of the physical boundaries in cyber-physical systems.

show abstract

Section: Risk Evaluation Methods Rss-cwss_cpsmentioning

confidence: 99%

Section: Risk Evaluation Methods Rss-cwss_cpsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

Kawanishi

Nishihara²,

Yamamoto

et al. 2023

IEICE Trans. Fundamentals

View full text Add to dashboard Cite

show abstract

“…This paper is organized as follows: Section 2 discusses related research about the cyber security [7][8][9][10], automation [11][12][13], and asset management [14][15][16][17] for IIoT and OT systems. Section 3 proposes the modeling method and data structure for IIoT systems, and Section 4 designs the asset configuration management method.…”

Section: (C) High Reliability and High Availabilitymentioning

confidence: 99%

“…Other studies on asset management include the proposal of an asset container method using the CWSS (Common Weakness Scoring System) and CVSS (Common Vulnerability Scoring System) [15], a study relating to a control system asset management tool that takes security into consideration [16], and an interface for the standardized management of control system assets (AAS: Asset Administration Shell) [17].…”

Section: Related Researchmentioning

confidence: 99%

Asset Management Method of Industrial IoT Systems for Cyber-Security Countermeasures

et al. 2021

View full text Add to dashboard Cite

Cyber-security countermeasures are important for IIoT (industrial Internet of things) systems in which IT (information technology) and OT (operational technology) are integrated. The appropriate asset management is the key to creating strong security systems to protect from various cyber threats. However, the timely and coherent asset management methods used for conventional IT systems are difficult to be implemented for IIoT systems. This is because these systems are composed of various network protocols, various devices, and open technologies. Besides, it is necessary to guarantee reliable and real-time control and save CPU and memory usage for legacy OT devices. In this study, therefore, (1) we model various asset configurations for IIoT systems and design a data structure based on SCAP (Security Content Automation Protocol). (2) We design the functions to automatically acquire the detailed information from edge devices by “asset configuration management agent”, which ensures a low processing load. (3) We implement the proposed asset management system to real edge devices and evaluate the functions. Our contribution is to automate the asset management method that is valid for the cyber security countermeasures in the IIoT systems.

show abstract

Cyber Security Controls in Nuclear Power Plant by Technical Assessment Methodology

et al. 2023

View full text Add to dashboard Cite

With the rapid increase in cyber attacks on industrial control systems, the significance of the application of cyber security controls and the evaluation of security against such attacks has also increased. Among them, cyber attacks on nuclear power plants (NPPs) can cause not only economic loss, but also human casualties. Thus, the application of cyber security controls is necessary for mitigating security threats, especially to NPPs. However, currently, there are limited resources pertaining to information protection, which is essential to uniformly deploy all the controls required to meet cyber security regulations. To overcome this challenge, effective cyber security controls need to be identified and adequate information protection resources must be allocated to each NPP. Although NPPs apply a differential security control according to its characteristics based on NEI 13-10 (Cyber Security Control Assessments), this alone is not only insufficient in reflecting the latest security threats, but also fails to confirm whether the security controls have actually mitigated such threats. To address this challenge, the Electric Power Research Institute (ETRI) developed the technical assessment methodology (TAM), which can be used to generate a quantitative score by assessing the effects of potential cyber attacks on an asset and the relevant security controls. This methodology allows for the application of differential security control based on the score to identify whether the security controls have actually mitigated the risks. Considering this context, the purpose of this paper is to conduct a comparative analysis of the results derived from applying security controls and assessing risks using only NEI 13-10 as well as both NEI 13-10 and TAM on the plant protection system of the nuclear power reactor APR1400. Furthermore, this paper discusses the scopes for subsequent research by addressing the limitations of the TAM and considerations for its use.

show abstract

A Study on Quantitative Risk Assessment Methods in Security Design for Industrial Control Systems

Cited by 6 publications

References 6 publications

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

Asset Management Method of Industrial IoT Systems for Cyber-Security Countermeasures

Cyber Security Controls in Nuclear Power Plant by Technical Assessment Methodology

Contact Info

Product

Resources

About