Conceptual Framework for Hybrid Situational Awareness in Critical Port Infrastructures

Schauer, Stefan; Rainer, Benjamin; Museux, Nicolas; Faure, David; Hingant, Javier; Rodrigo, Federico Jesús Carvajal; Beyer, Stefan; Lopez, Sergio Zamarripa

doi:10.1007/978-3-030-05849-4_15

Cited by 7 publications

(5 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Several works apply the Internet of Things (IoT) paradigm, using connected sensors to monitor environmental parameters from apparently unrelated port processes, with the aim of connecting them to descry new cause–effect relationships. In this regard, the work in [ 19 ] suggests a method to obtain situational awareness information about critical port infrastructures. The proposed approach combines information from the cyber and physical domains (e.g., camera and sensors) to prevent cascading effects of incidents.…”

Section: Related Workmentioning

confidence: 99%

An ICT Prototyping Framework for the “Port of the Future”

Barasti

Troscia

Lattuca

et al. 2021

Sensors

View full text Add to dashboard Cite

Seaports are genuine, intermodal hubs connecting seaways to inland transport links, such as roads and railways. Seaports are located at the focal point of institutional, industrial, and control activities in a jungle of interconnected information systems. System integration is setting considerable challenges when a group of independent providers are asked to implement complementary software functionalities. For this reason, seaports are the ideal playground where software is highly composite and tailored to a large variety of final users (from the so-called port communities). Although the target would be that of shaping the Port Authorities to be providers of (digital) innovation services, the state-of-the-art is still that of considering them as final users, or proxies of them. For this reason, we show how a canonical cloud, virtualizing a distributed architecture, can be structured to host different, possibly overlapped, tenants, slicing the information system at the infrastructure, platform, and software layers. Resources at the infrastructure and platform layers are shared so that a variety of independent applications can make use of the local calculus and access the data stored in a Data Lake. Such a cloud is adopted by the Port of Livorno as a rapid prototyping framework for the development and deployment of ICT innovation services. In order to demonstrate the versatility of this framework, three case studies relating to as many prototype ICT services (Navigation Safety, e-Freight, and Logistics) released within three industrial tenants are here presented and discussed.

show abstract

Section: Related Workmentioning

confidence: 99%

An ICT Prototyping Framework for the “Port of the Future”

Barasti

Troscia

Lattuca

et al. 2021

Sensors

View full text Add to dashboard Cite

show abstract

“…Together, SSeA, DSA, and SOD allows an individual to understand their internal states, how they relate to each other, and how they relate to their interactions with the environment. Sometimes physicaldomain assets are affected by cyber-domain threats which require Physical SA (PSA; Schauer et al, 2018), and subsequently, Hybrid SA (HSA; Schauer et al, 2018) to predict how decisions will affect cyber and physical systems based on the interconnectedness between physical and cyber assets.…”

Section: Hierarchical Meta-situational Awareness (Hmsa)mentioning

confidence: 99%

A Gamification Approach to Improving Interpersonal Situational Awareness in Cyber Defense

Ask¹,

Knox²,

Lugo³

et al. 2021

Preprint

View full text Add to dashboard Cite

In cyber threat situations, the establishment of a shared situational awareness as a basis for cyber defense decision-making results from adequate communication of a Recognized Cyber Picture (RCP). RCPs consist of actively selected information and have the goal of accurately presenting the severity and potential consequences of the situation. RCPs must be communicated between individuals, but also between organizations, and often from technical to non-/less technical personnel. The communication of RCPs is subject to many challenges that may affect the transfer of critical information between individuals. There are currently no common best practices for training communication for shared situational awareness among cyber defense personnel. The Orient, Locate, Bridge (OLB) model is a pedagogic tool to improve communication between individuals during a cyber threat situation. According to the model, an individual must apply meta-cognitive awareness (O), perspective taking (L), and communication skills (B) to successfully communicate the RCP. Gamification (applying game elements to non-game contexts) has shown promise as an approach to learning. We propose a novel OLB-based Gamification design to improve dyadic communication for shared situational awareness among (technical and non-technical) individuals during a cyber threat situation. The design includes the Gamification elements of narrative, scoring, feedback, and judgment of self. The proposed concept contributes to the educational development of cyber operators from both military and civilian organizations responsible for defending and securing digital infrastructure. This is achieved by combining the elements of a novel communication model with gamification in a context in urgent need for educational input.

show abstract

“…To achieve this, a conceptual framework and methodology for a hybrid situational awareness (HSA) tool has been developed (see Fig. 1) that can determine the potential consequences of any relevant incident detected either by the SAURON PSA or by the CSA system and show the potential cascading effects in both domains [14].…”

Section: Technologies To Counter the Cyber-physical Security Threat -mentioning

confidence: 99%

How Port Security has to evolve to address the Cyber-Physical Security Threat: lessons from the SAURON project

Adams¹,

Chisnall²,

Pickering³

et al. 2020

Int. J. TDI

View full text Add to dashboard Cite

Ports are organisationally complex critical infrastructures that have to deliver reliable movement of goods and the safe transport of people. The EU is concerned that there is an increasing number of cases where ports have been subject to combined attacks on their IT and physical infrastructure for criminal gain or other malign purposes. The European Commission has funded the SAURON project (Scalable multidimensionAl sitUation awaReness sOlution for protectiNg European ports) to help protect European ports from a physical, cyber or a combined cyber-physical attack. The aim of this paper is to provide guidance on how port security needs to evolve to respond to the cyber-physical security threat, drawing on concepts developed in SAURON. This paper reviews the current port security approaches and the cyber-physical security threat and then assesses how new systems and technologies under development, including SAURON technologies, may help to reduce port vulnerabilities. For example, to detect combined attacks on port infrastructure in the physical and cyber domains and identify the cascading effects of an incident in both domains to enable effective countermeasures, the SAURON hybrid situational awareness tool incorporates inputs from the physical and cyber domains and analyses their interdependencies. The goal is that once a physical and/or cyber threat is detected, the potential consequences including cascading effects in both planes will be automatically shown to decision-makers in order to give them integrated situational awareness of what is happening and how the situation could evolve, thus supporting decision-making. The benefits of such approaches are described. Security technologies need to be complemented by effective security processes operated by personnel with appropriate training: the paper uses results of a table-top exercise supported by analysis of port user requirements to identify the importance of multidisciplinary training in combatting complex combined cyber-physical security threats.

show abstract

Conceptual Framework for Hybrid Situational Awareness in Critical Port Infrastructures

Cited by 7 publications

References 20 publications

An ICT Prototyping Framework for the “Port of the Future”

An ICT Prototyping Framework for the “Port of the Future”

A Gamification Approach to Improving Interpersonal Situational Awareness in Cyber Defense

How Port Security has to evolve to address the Cyber-Physical Security Threat: lessons from the SAURON project

Contact Info

Product

Resources

About