An Experimental Evaluation of Bow-Tie Analysis for Cybersecurity Requirements

Meland, Per Håkon; Bernsmed, Karin; Frøystad, Christian; Li, Jingyue; Sindre, Guttorm

doi:10.1007/978-3-030-12786-2_11

Cited by 2 publications

(2 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This technique can provide a simple and comprehensible portrayal of effective risk assessment scenarios and a logical relationship between causes and consequences in the form of a chart (6). The BTA technique has been used for risk management purposes since the 1970s (7). For example, Khakzad et al used BTA to analyze safety risks in offshore drilling operations (8).…”

Section: Introductionmentioning

confidence: 99%

Risk Assessment of Petroleum Products Loading Arm by BTA Technique

Aliabadi

Mohammadfam

Khorshidikia

2021

Jundishapur J Health Sci

View full text Add to dashboard Cite

Background: Loading of petroleum products consists of several parts, of which the arm platform section is known to be the source of most accidents. Objectives: Therefore, this study was done to evaluate the risk of arm loading platforms using the bow-tie analysis (BTA) technique to identify the causes and the probability of occurrence of hazardous events. Methods: In this study, we first identified the risks of the loading arm using the expert’s judgment. The risk of overflow is considered as the top event. Then, the basic events were identified by the fault tree analysis (FTA), and the possible consequences of the top event were predicted using the event tree. Next, using the computational equations, the probability of spillover and its consequences were calculated. The path of the risk event from the causal phase to the consequent phase was also illustrated by sketching the structure of the BTA. Results: A total of 14 basic events and 8 intermediate events were involved in the occurrence of the top event, and 5 consequences were identified for the risk of spillover. The probability of the top event occurring was calculated to be 3.12 × 10-7. Conclusions: According to the results of this study, tank overflow is one of the most important hazards in the loading arm section.

show abstract

Section: Introductionmentioning

confidence: 99%

Risk Assessment of Petroleum Products Loading Arm by BTA Technique

Aliabadi

Mohammadfam

Khorshidikia

2021

Jundishapur J Health Sci

View full text Add to dashboard Cite

show abstract

“…This paper is an extension of previous work in Meland et al (2018) and is structured as follows. We briefly show related work and explain the history and notation of bow-ties and misuse cases in Section 2, as well as how they can be compared to each other.…”

Section: Introductionmentioning

confidence: 99%

An experimental evaluation of bow-tie analysis for security

Meland

Bernsmed

Frøystad

et al. 2019

ICS

Self Cite

View full text Add to dashboard Cite

Purpose Within critical-infrastructure industries, bow-tie analysis is an established way of eliciting requirements for safety and reliability concerns. Because of the ever-increasing digitalisation and coupling between the cyber and physical world, security has become an additional concern in these industries. The purpose of this paper is to evaluate how well bow-tie analysis performs in the context of security, and the study’s hypothesis is that the bow-tie notation has a suitable expressiveness for security and safety. Design/methodology/approach This study uses a formal, controlled quasi-experiment on two sample populations – security experts and security graduate students – working on the same case. As a basis for comparison, the authors used a similar experiment with misuse case analysis, a well-known technique for graphical security modelling. Findings The results show that the collective group of graduate students, inexperienced in security modelling, perform similarly as security experts in a well-defined scope and familiar target system/situation. The students showed great creativity, covering most of the same threats and consequences as the experts identified and discovering additional ones. One notable difference was that these naïve professionals tend to focus on preventive barriers, leading to requirements for risk mitigation or avoidance, while experienced professionals seem to balance this more with reactive barriers and requirements for incident management. Originality/value Our results are useful in areas where we need to evaluate safety and security concerns together, especially for domains that have experience in health, safety and environmental hazards, but now need to expand this with cybersecurity as well.

show abstract

An Experimental Evaluation of Bow-Tie Analysis for Cybersecurity Requirements

Cited by 2 publications

References 29 publications

Risk Assessment of Petroleum Products Loading Arm by BTA Technique

Risk Assessment of Petroleum Products Loading Arm by BTA Technique

An experimental evaluation of bow-tie analysis for security

Contact Info

Product

Resources

About