Critical Infrastructures Vulnerability and Risk Analysis

Zio, Enrico

doi:10.1007/s41125-016-0004-2

Cited by 42 publications

(25 citation statements)

References 57 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The complexity of CIs calls for approaches capable of viewing the problem from multiple perspectives [37][38][39]. System analysis, reliability engineering, graph theory and others have been propounded to study the behavior and performance of complex systems, also with respect to failure events, their protection and resilience [27,40,41].…”

Section: Accepted Manuscript 1 Introductionmentioning

confidence: 99%

A multi-perspective framework of analysis of critical infrastructures with respect to supply service, controllability and topology

Han

Zio

2019

International Journal of Critical Infrastructure Protection

Self Cite

View full text Add to dashboard Cite

To cite this version:Fangyuan Han, Enrico Zio. A multi-perspective framework of analysis of critical infrastructures with respect to supply service, controllability and topology. International Journal of Critical Infrastructure Protection, Elsevier, 2019, 24, pp.Please cite this article as: Fangyuan Han, Enrico Zio, A multi-perspective framework of analysis of critical infrastructures with respect to supply service, controllability and topology, International Journal of Critical Infrastructure Protection (2018), doi: https://doi. AbstractIn this work, we propose a multi-perspective framework of analysis of critical infrastructures (CIs) with respect to supply service, topology and controllability. The framework enables identifying the role of CI elements and quantifying the consequences of scenarios of multiple failures, with respect to the different perspectives considered. To present the analysis framework, a benchmark network representative of a real gas transmission network across several countries of the European Union (EU) is considered. The information extracted from such analysis can help us to identify the critical elements and how the properties of the network are affected by failures, and to propose corresponding improvements for CIs.The findings of this paper demonstrate the interest of considering several perspectives in the analysis of CIs for providing useful information for ensuring their safe and reliable operation.

show abstract

Section: Accepted Manuscript 1 Introductionmentioning

confidence: 99%

A multi-perspective framework of analysis of critical infrastructures with respect to supply service, controllability and topology

Han

Zio

2019

International Journal of Critical Infrastructure Protection

Self Cite

View full text Add to dashboard Cite

show abstract

“…Usually, organizations rely on risk analysis and management methods to protect them from the potential losses caused by the disruptive events [5][6][7][8]. Khan et al [9] presented a thorough review of the commonly applied safety and risk management methods in process industries.…”

mentioning

confidence: 99%

An integrated modeling framework for quantitative business continuity assessment

Zeng

Zio

2017

Process Safety and Environmental Protection

Self Cite

View full text Add to dashboard Cite

Systems are increasingly exposed to threats of disruptive events, e.g., failures, natural disasters, terrorist attacks, etc. A proactive approach is needed to protect the business and reduce the potential losses caused by these disruptive events. Business Continuity Management (BCM) is a way to integrate the recovery process within the preventive framework of risk assessment. Such integrated risk management strategy offers great potential benefits. However, the complexity of applying it in practice is such that existing BCM strategies are mainly based on qualitative methods only, which limits the potential added values. To support quantitative BCM, in this paper we define a set of quantitative business continuity metrics. The defined metrics are based on the estimated losses incurred by the disruptive event in the whole business process. For this, the business process is divided into four sequential phases, i.e., protection phase, mitigation phase, emergency phase and recovery phase. For each phase, a specific modeling method is developed and an integrated modeling framework is constructed for the business continuity. Simulation can, then, be used to quantify the business continuity metrics. The developed methods are applied to assess the business continuity of an oil storage tank farm

show abstract

“…indicates that different perspectives than traditional ways are required to investigate potential failures in systems (Zio, 2016 a).…”

Section: Failure Anticipation In Critical Infrastructurementioning

confidence: 99%

“…Statistics shows that system-level breakdowns were initially caused by small distresses with cascading consequences. Predicting cyber failures in complex systems encounters barriers to address behavioral, functional, topological and human interaction vulnerabilities (Zio, 2016), while human is stated to be the most vulnerable factor in cybersecurity that need impact measurement, security programs, training, and authority limitations (Katz et al, 2016).…”

Section: Failure Anticipation In Critical Infrastructurementioning

confidence: 99%

“…The increasing number of "surprise events" that negatively affect critical infrastructures indicates the need for anticipatory methods that predict and mitigate potential failures from different perspectives. Anticipatory methods that start from a proposed future failure and use deductive methods to investigate the bugs and interconnections that can lead to the failure in the system, provide insight about failure circumstances (Zio, 2016 a).…”

Section: Lessons Learned and Knowledge Gapmentioning

confidence: 99%

See 1 more Smart Citation

Using Publicly Available Information to Predict Cyber Failures

Badalkhani¹

View full text Add to dashboard Cite

This research examines the use of an anticipatory method and publicly available newsworthy information on ten past cyber failures of critical infrastructures in the United States to predict cyber failures of networks and systems of technology startups.The Anticipatory Failure Determination (AFD) method was modified to enable the use of publicly available information. A list of the resources that were used to cause the ten cyber failures in critical infrastructures was produced and used to make predictions of failure scenarios of a stack of open source software. Finally, the factors that enable and constrain the use of the AFD method to predict cyber failures in technology startups were specified.Junior engineers, designers, contractors and other stakeholders of cyber systems as well as government policy makers will be interested in outcome of this research to predict potential cyber failures for proactive mitigation.iii Acknowledgement Firstly, I would like to express my sincere gratitude to my advisor Prof. Bailetti for the continuous support, for his patience, motivation, and immense knowledge. I could not have imagined having a better advisor and mentor for my study.

show abstract

Critical Infrastructures Vulnerability and Risk Analysis

Cited by 42 publications

References 57 publications

A multi-perspective framework of analysis of critical infrastructures with respect to supply service, controllability and topology

A multi-perspective framework of analysis of critical infrastructures with respect to supply service, controllability and topology

An integrated modeling framework for quantitative business continuity assessment

Using Publicly Available Information to Predict Cyber Failures

Contact Info

Product

Resources

About