Methods for the Total Risk Assessment of Cybersecurity of Critical Infrastructure Facilities

Abstract

The paper presents the analysis of national and foreign literature on the methods of cybersecurity risk assessment including critical infrastructure facilities. It is stated that cybersecurity and risk assessment are an important issue of critical infrastructure facilities. The paper proposes graphical and analytical methods for assessing the total cybersecurity risk of I&C systems including critical infrastructure facilities. These total risk assessment methods are based on determining the maximum values of consequences for each risk. It is shown that the maximum values of cyber threat effects can be determined by expert means, as the maximum losses that can be caused to the company assets. The proposed methods make it possible to determine the total cybersecurity risk of critical infrastructure, the total losses due to multiple cyber threats, the total losses due to a single cyber threat for a certain period of time, the likelihood of maximum losses due to multiple cyber threats. There are the advantages of these methods for assessing total risk. Based on the proposed methods, it is possible to develop a methodology for assessing the cybersecurity risks of I&C systems including critical infrastructure facilities, and build decision support systems for the application of risk reduction measures. The economic feasibility of applying these or other risk treatment measures, both organizational and technical, is defined by evaluating the cost of such measures with the maximum amount of losses due to the total risk.

Critical Infrastructures Overview: Past, Present and Future

“…Huff et al [30] examined the benefit of development and analysis of the NATO Human View to aid engineering managers to make investment decisions that can mitigate security threats. Some authors, like Mokhor et al [31] and de Bruijn et al [32] present a review on the methods of cybersecurity risk and flood emergencies, respectively. Related to the topic of cybersecurity, Karbowski et al [33] proposed an application of the Markov chain model to assess the risk affecting CIs.…”

Modeling of the Process of Optimization of Decision-Making at Control of Parameters of Energy and Technical Systems on the Example of Remote Earth’s Sensing Tools

“…To prevent the occurrence of risky situations, these polynomial mathematical models and mathematical models presented by systems of differential equations, as well as stochastic mathematical models are used [10][11][12][13].…”

Modern technical and software-analytical tools for solving problems of radiation and technogenic-ecological safety of Ukraine

“…We analyzed scientific publications and systematized research in the following areas: 1) radiation and technogenic environmental safety [6][7][8][9][10][11][12][13][14]; 2) environmental monitoring of technogenic-loaded territories [15][16][17][18][19][20][21][22]; 3) introduction of innovative developments in practice and in training and advanced training of specialists in the field of nuclear energy, etc. [23][24][25][26][27].…”