Evaluation of Cyber Security and Modelling of Risk Propagation with Petri Nets

Szpyrka, Marcin; Jasiul, Bartosz

doi:10.3390/sym9030032

Cited by 17 publications

(8 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In references 13,14, it was presented how formal methods, that is, colored Petri nets, can be used to model protocol specifications, and how formal verification can help to analyze protocol properties. In reference 15, it was presented a Petri net model that can be adapted to the propagation model of any systems' characteristics. In this study, they showed the formal model of risk propagation.…”

Section: Related Workmentioning

confidence: 99%

Model‐based risk assessment evaluation

Germanos

Zeng

2022

Security and Privacy

View full text Add to dashboard Cite

Risk assessment (RA) belongs to the core parts of an organizational risk management process. The primary goals of a RA are the identification, estimation and prioritization of risk(s) to organizational operations. The existing quantitative analysis of RA is focusing on the risk factors, that is, threat or vulnerability. However, the quantitative metrics of the assessment have not been formally defined and modeled yet. Consequently, it is essential to define a formal model and relevant security metrics for RA within an organization. In this study, we will use a complete lattice to analyze risk factors. Moreover, a formal model will be defined to describe the RA process. The reachability of the model will be discussed.Quantitative metrics will be defined to provide insight on the risk estimation.The model can be expressed using colored Petri nets. This study can assist chief information security officers analyze security risks in their organizations and help them balance the security budget in their organizations.

show abstract

Section: Related Workmentioning

confidence: 99%

Model‐based risk assessment evaluation

Germanos

Zeng

2022

Security and Privacy

View full text Add to dashboard Cite

show abstract

“…These works do not cover incident propagation to connected infrastructure elements. The work of [67] addresses the impact propagation of cyber incidents using the Petri Nets model, to identify impacted elements and assess their impacts. In recent work, one of the only papers dealing with the propagation of incidents in an integrated cyber-physical context is that of [3].…”

Section: B Incident Propagation Models and Approachesmentioning

confidence: 99%

Semantic-Based Approach for Cyber-Physical Cascading Effects Within Healthcare Infrastructures

et al. 2022

View full text Add to dashboard Cite

This paper presents a framework for integrated cyber-physical security propagation study within critical infrastructures (hospitals use case). The framework includes an ontology for the semantic modeling of cyber-physical security. The impact propagation approach relies on propagation rules inferring the cascading effects of security incidents occurring in hospitals. An impact score module allows evaluating impacts' severity, considering implemented protection measures. This work is part of the European project SAFECARE, which provides a set of tests and demonstration sessions in partnership with 3 hospitals in Europe. During these tests, we measured effectiveness and efficiency metrics, as well as end users' satisfaction feedback. Experiments performed on real attack scenarios, show high effectiveness rates and a common agreement from end-users about the added value of the solution to enhance risks analysis practice and increase hospitals mitigation strategies efficiency.

show abstract

“…Its advantage is that it has strict mathematical expressions and intuitive graphical expressions. Therefore, Petri nets can also be used for network security evaluation modeling [23]. In addition, fuzzy theory is often used to resolve the uncertainty of trust relationships.…”

Section: Fuzzy Petri Netmentioning

confidence: 99%

Web User Trust Evaluation: A Novel Approach Using Fuzzy Petri Net and Behavior Analysis

Tian

Zhang

et al. 2021

Symmetry

View full text Add to dashboard Cite

With the development of society and information technology, people’s dependence on the Internet has gradually increased, including online shopping, downloading files, reading books, and online banking. However, how to ensure the safety and legitimacy of these network user behaviors has become the focus of attention. As we all know, cybersecurity and system resilience originate from symmetry. Due to the diversity and unpredictability of cyber-attacks, absolute cybersecurity is difficult to achieve; system resilience indicates that protecting system security should shift from resisting attacks to ensuring system continuity. The trust evaluation of network users is a research hotspot in improving network system security. Aiming at the defects of incomplete evaluation processes and inaccurate evaluation results in current online user behavior trust evaluation methods, this paper combines the basic principles of online user trust evaluation and proposes a trust evaluation model that combines fuzzy Petri nets with user behavior analysis. First, for “unfamiliar” users, we used fuzzy Petri nets to calculate the user’s recommended trust value as the system’s indirect trust value; next, we used the user’s behavior record as evidence to conduct direct trust evaluation on the user to obtain the system’s direct trust in the user’s value; finally, the two calculation results were combined to obtain the user’s comprehensive trust value. In terms of experimental verification, the experimental data came from a self-developed e-book management system. Through theoretical analysis and simulation results, it was shown that the model met the optimization conditions of subjective and objective relative balance, the evaluation process was more complete, and the trust evaluation values of network users could be obtained more accurately. This evaluation method provides solid theory and research ideas for user credibility judgment of key network basic application platforms such as online shopping malls, online transactions, and online banking.

show abstract

Evaluation of Cyber Security and Modelling of Risk Propagation with Petri Nets

Cited by 17 publications

References 24 publications

Model‐based risk assessment evaluation

Model‐based risk assessment evaluation

Semantic-Based Approach for Cyber-Physical Cascading Effects Within Healthcare Infrastructures

Web User Trust Evaluation: A Novel Approach Using Fuzzy Petri Net and Behavior Analysis

Contact Info

Product

Resources

About