Creating Meta Attack Language Instances using ArchiMate: Applied to Electric Power and Energy System Cases

Hacks, Simon; Hacks, Alexander Johannes; Katsikeas, Sotirios; Klaer, Benedikt; Lagerström, Robert

doi:10.1109/edoc.2019.00020

Cited by 16 publications

(8 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…represents the set of nodes at the physical layer that can be detected by the scheduling center and meets the following requirements: (3)(4)(5)(6)(7)(8)(9)(10)(11)(12)(13) According to the information received, the dispatching center takes the minimum load loss as the objective function to carry out an optimization calculation and defines SC(P The dispatching center updates the electrical parameters to the working nodes of the communication layer along with the control instruction. A control information transmission failure occurs when the transmission delay is greater than the threshold MaxT , and the node receiving the control information adjusts the electrical properties according to P j∼ 12 .…”

Section: ) Physical Layer Failure Analysismentioning

confidence: 99%

See 1 more Smart Citation

A Cascading Failure Model Considering Operation Characteristics of the Communication Layer

et al. 2021

View full text Add to dashboard Cite

The coupling of communication networks plays an indispensable role in modern power systems; however, it also leads to many problems due to cascading failure. Although most current research focuses on the single-layer, non-interacting system and physical layer network, few studies have combined the complex network theory to ignore the influence of communication networks. To address this problem, this paper introduces a cascading failure model of a cyber physical power system (CPPS) that considers the operation characteristics of the communication layer, especially the influence of transmission delay and connectivity on stability control. First, the influence mode of the communication layer failure node acting on the physical layer is analyzed, and the interaction mechanism between the communication layer and physical layer is clarified. Furthermore, the propagation process of failure in the CPPS system is modeled, and the influence of information transmission delay on the stability control process is considered. In this manner, the development process of cascading failure in a CPPS system is described accurately. Finally, according to the loss rate of the physical layer load, the influence of the communication layer node is evaluated to verify the accuracy of the model. This paper also provides a practical model of a CPPS system, which is helpful for building a secure and reliable energy Internet. INDEX TERMS Cascading failure, communication delay, complex network, cyber physical power system, stability control.

show abstract

Section: ) Physical Layer Failure Analysismentioning

confidence: 99%

“…The coupling relation between layers makes system failure possible between the communication and physical layers, which could then cause a cascading failure [8]- [10]. Cascading failure is one of the most serious problems in power systems and may result in substantial economic losses and large-scale damage to power users [11]- [13].…”

Section: Introductionmentioning

confidence: 99%

A Cascading Failure Model Considering Operation Characteristics of the Communication Layer

et al. 2021

View full text Add to dashboard Cite

show abstract

“…So far, several languages have been built in MAL like vehicleLang [19], which allows modeling cyber-attacks on modern vehicles, or coreLang [18], which contains the most common IT entities and attack steps. Another approach is the automated creation of MAL languages by translating existing concepts to MAL [11].…”

Section: Related Workmentioning

confidence: 99%

Towards an Ecosystem of Domain Specific Languages for Threat Modeling

Hacks

Katsikeas

2021

Advanced Information Systems Engineering

Self Cite

View full text Add to dashboard Cite

Today, many of our activities depend on the normal operation of the IT infrastructures that supports them. However, cyber-attacks on these infrastructures can lead to disastrous consequences. Therefore, efforts towards assessing the cyber-security are being done, such as attack graph simulations based on system architecture models. The Meta Attack Language (MAL) was previously proposed as a framework for developing Domain Specific Languages (DSLs) that can be used for the aforementioned purpose. Since many common components exist among different domains, a way to prevent repeating work had to be defined. To facilitate this goal, we adapt taxonomy building by Nickerson and propose an ecosystem of MAL-based DSLs that describes a systematic approach for not only developing, but also maintaining them over time. This can foster the usage of MAL for modeling new domains.

show abstract

“…Other languages are coreLang [12], which contains the most common IT entities and attack steps, or powerLang [8] that is designed for modeling organizations in the power domain. Another approach is the automated creation of MAL languages by translating existing concepts from the ArchiMate language to MAL [7].…”

Section: Related Workmentioning

confidence: 99%

Towards Measuring Test Coverage of Attack Simulations

Hersén

Hacks

Fögen

2021

Enterprise, Business-Process and Information Systems Modeling

Self Cite

View full text Add to dashboard Cite

Designing secure and reliable systems is a difficult task. Threat modeling is a process that supports the secure design of systems by easing the understanding of the system's complexity, as well as identifying and modeling potential threats. These threat models can serve as input for attack simulations, which are used to analyze the behavior of attackers within the system. To ensure the correct functionality of these attack simulations, automated tests are designed that check if an attacker can reach a certain point in the threat model. Currently, there is no way for developers to estimate the degree to which their tests cover the attack simulations and, thus, they cannot the determine the quality of their tests. To resolve this shortcoming, we analyze structural testing methods from the software engineering domain and transfer them to the threat modeling domain by following an Action Design Research approach. Further, we develop a first prototype, which is able to assess the test coverage in an automated way. This will enable threat modeler to determine the quality of their tests and, simultaneously, increase the quality of the threat models.

show abstract

Creating Meta Attack Language Instances using ArchiMate: Applied to Electric Power and Energy System Cases

Cited by 16 publications

References 30 publications

A Cascading Failure Model Considering Operation Characteristics of the Communication Layer

A Cascading Failure Model Considering Operation Characteristics of the Communication Layer

Towards an Ecosystem of Domain Specific Languages for Threat Modeling

Towards Measuring Test Coverage of Attack Simulations

Contact Info

Product

Resources

About