Cyber Security Metrics for Performance Measurement in E-Business

Geleta, Rabira

doi:10.1109/icssit.2018.8748525

Cited by 1 publication

(1 citation statement)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For this reason, the OT community would benefit significantly from new cyber-resilience metrics that can be used to measure the security improvements from adding additional cybersecurity technologies [22]. Work in this area includes gathering metrics based on characterizing the physical consequence resulting from a physical attack [4], [23], [24], which is critical for OT applications, but also cyber consequences that provide a more generalized understanding of the impact to the communications system [25], [26]. However, an integrated approach is important to providing the actionable perspective for both the cyber defender and power system operator [27] for OT environments.…”

Section: Introductionmentioning

confidence: 99%

Cybersecurity Resilience Demonstration for Wind Energy Sites in Co-Simulation Environment

McCarty

Johnson

Richardson³

et al. 2023

IEEE Access

View full text Add to dashboard Cite

Sandia National Laboratories and Idaho National Laboratory deployed state-of-the-art cybersecurity technologies within a virtualized, cyber-physical wind energy site to demonstrate their impact on security and resilience. This work was designed to better quantify cost-benefit tradeoffs and risk reductions when layering different security technologies on wind energy industrial control system, operational technology networks. Standardized step-by-step attack scenarios were drafted for adversaries with remote and local access to the wind network. Then, the team investigated the impact of encryption, access control, intrusion detection, security information and event management, and security, orchestration, automation, and response (SOAR) tools on multiple metrics, including physical impacts to the power system and termination of the adversary kill chain. We found, once programmed, the intrusion detection systems could detect attacks and the SOAR system was able to effectively and autonomously quarantine the adversary, prior to impacting the power system. Cyber and physical metrics indicated good network and endpoint visibility were essential to demonstrate the resilience of the system. In particular, certain hardening technologies, like encryption, reduced access to the adversaries, but recognition and response were able to ensure there was no impact to the operation of the wind site generators.INDEX TERMS wind turbine generation, cybersecurity, cyber-resilience, co-simulation, cyber-physical systems However, the control systems necessary to integrate renewable energy systems expand the attack surface by exposing

show abstract