Supporting Sustainable Maintenance of Substations under Cyber-Threats: An Evaluation Method of Cybersecurity Risk for Power CPS

Fan, Youping; Li, Jingjiao; Zhang, Dai; Pi, Jiali; Song, Jiahan; Zhao, Guowei

doi:10.3390/su11040982

Cited by 16 publications

(8 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Regarding the security attributes identified during this mapping study, we observe a similarity between security requirements deemed important for both the CPS and the better‐researched (or “traditional”) IT (e.g., in healthcare information systems, 121 in cloud computing applications, 122 or in process‐aware information systems 123 ). However, we observe a difference is in the application priority of those attributes.…”

Section: Discussionmentioning

confidence: 87%

“…Figure 9 and Table A5 present the validation metrics used to assess the performance of the proposed techniques. As we could see, some papers reported the results in the form of ratios such as Potential Target Ratio, 121 message validation ratio percentage, 122 load loss ratio also known as load loss factor (LFR), and benefit‐cost ratio (BCR) 84 . The load calculations used for evaluating the performance of their proposed techniques consisted of readings on load shedding, 123 rate of cascading failure, LFR, load drop percentage, load curtailment (CL), 124 load forecasting, 125 and active power generation 109 .…”

Section: Findings Of Our Reviewmentioning

confidence: 88%

See 1 more Smart Citation

Security risks in cyber physical systems—A systematic mapping study

Zahid

Inayat

Daneva

et al. 2021

J Software Evolu Process

View full text Add to dashboard Cite

The increased need for constant connectivity and complete automation of existing systems fuels the popularity of Cyber Physical Systems (CPS) worldwide. Increasingly more, these systems are subjected to cyber attacks. In recent years, many major cyber‐attack incidents on CPS have been recorded and, in turn, have been raising concerns in their users' minds. Unlike in traditional IT systems, the complex architecture of CPS consisting of embedded systems integrated with the Internet of Things (IoT) requires rather extensive planning, implementation, and monitoring of security requirements. One crucial step to planning, implementing, and monitoring of these requirements in CPS is the integration of the risk management process in the CPS development life cycle. Existing studies do not clearly portray the extent of damage that the unattended security issues in CPS can cause or have caused, in the incidents recorded. An overview of the possible risk management techniques that could be integrated into the development and maintenance of CPS contributing to improving its security level in its actual environment is missing. In this paper, we are set out to highlight the security requirements and issues specific to CPS that are discussed in scientific literature and to identify the state‐of‐the‐art risk management processes adopted to identify, monitor, and control those security issues in CPS. For that, we conducted a systematic mapping study on the data collected from 312 papers published between 2000 and 2020, focused on the security requirements, challenges, and the risk management processes of CPS. Our work aims to form an overview of the security requirements and risks in CPS today and of those published contributions that have been made until now, towards improving the reliability of CPS. The results of this mapping study reveal (i) integrity authentication and confidentiality as the most targeted security attributes in CPS, (ii) model‐based techniques as the most used risk identification and assessment and management techniques in CPS, (iii) cyber‐security as the most common security risk in CPS, (iv) the notion of “mitigation measures” based on the type of system and the underline internationally recognized standard being the most used risk mitigation technique in CPS, (v) smart grids being the most targeted systems by cyber‐attacks and thus being the most explored domain in CPS literature, and (vi) one of the major limitations, according to the selected literature, concerns the use of the fault trees for fault representation, where there is a possibility of runtime system faults not being accounted for. Finally, the mapping study draws implications for practitioners and researchers based on the findings.

show abstract

Section: Discussionmentioning

confidence: 87%

Section: Findings Of Our Reviewmentioning

confidence: 88%

Security risks in cyber physical systems—A systematic mapping study

Zahid

Inayat

Daneva

et al. 2021

J Software Evolu Process

View full text Add to dashboard Cite

show abstract

“…A different approach which considers intrusion and disruption process modeling is proposed in [55], in which a stochastic game theory-based CPES security evaluation model is developed. The authors in [56] propose a mathematical framework to estimate the probability and evaluate the impact of malicious attacks on substation automation systems. In [57], the reliability and security of CPES are analyzed through a communication failure assessment process.…”

Section: B Cpes Security Studiesmentioning

confidence: 99%

Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies

Zografopoulos¹,

Ospina²,

Liu³

et al. 2021

Preprint

View full text Add to dashboard Cite

Cyber-physical systems (CPS) are interconnected architectures that employ analog, digital, and communication resources for their interaction with the physical environment. CPS are the backbone of enterprise, industrial, and critical infrastructure. Thus, their vital importance, makes them prominent targets for malicious attacks aiming to disrupt their operations. Attacks targeting cyber-physical energy systems (CPES), given their mission-critical nature, can have disastrous consequences. The security of CPES can be enhanced leveraging testbed capabilities to replicate power systems operation, discover vulnerabilities, develop security countermeasures, and evaluate grid operation under fault-induced or maliciously constructed scenarios. In this paper, we provide a comprehensive overview of the CPS security landscape with emphasis on CPES. Specifically, we demonstrate a threat modeling methodology to accurately represent the CPS elements, their interdependencies, as well as the possible attack entry points and system vulnerabilities. Leveraging the threat model formulation, we present a CPS framework designed to delineate the hardware, software, and modeling resources required to simulate the CPS and construct high-fidelity models which can be used to evaluate the system's performance under adverse scenarios. The system performance is assessed using scenario-specific metrics, while risk assessment enables the system vulnerability prioritization factoring the impact on the system operation. The overarching framework for modeling, simulating, assessing, and mitigating attacks in a CPS is illustrated using four representative attack scenarios targeting CPES. The key objective of this paper is to demonstrate a stepby-step process that can be used to enact in-depth cybersecurity analyses, thus leading to more resilient and secure CPS.

show abstract

“…The authors focused on the allocation of diver's security mechanisms and tried to increase the security of the cyber assets located within the electronic security perimeter of a substation by and also used a game theory to analyze the vulnerability assessment for power grid network. Ref [12] evaluated cybersecurity risk of power CPS by using modified hypergraph that determines the probability of successful cyberattacks on Substation Auto Systems (SAS) and their countermeasures.…”

Section: Related Workmentioning

confidence: 99%

Detecting Cyber Supply Chain Attacks on Cyber Physical Systems Using Bayesian Belief Network

Yeboah-Ofori

Islam

Brimicombe

2019

2019 International Conference on Cyber Security and Internet of Things (ICSIoT)

View full text Add to dashboard Cite

Identifying cyberattack vectors on cyber supply chains (CSC) in the event of cyberattacks are very important in mitigating cybercrimes effectively on Cyber Physical Systems CPS. However, in the cyber security domain, the invincibility nature of cybercrimes makes it difficult and challenging to predict the threat probability and impact of cyber attacks. Although cybercrime phenomenon, risks, and treats contain a lot of unpredictability's, uncertainties and fuzziness, cyberattack detection should be practical, methodical and reasonable to be implemented. We explore Bayesian Belief Networks (BBN) as knowledge representation in artificial intelligence to be able to be formally applied probabilistic inference in the cyber security domain. The aim of this paper is to use Bayesian Belief Networks to detect cyberattacks on CSC in the CPS domain. We model cyberattacks using DAG method to determine the attack propagation. Further, we use a smart grid case study to demonstrate the applicability of attack and the cascading effects. The results show that BBN could be adapted to determine uncertainties in the event of cyberattacks in the CSC domain.

show abstract

Supporting Sustainable Maintenance of Substations under Cyber-Threats: An Evaluation Method of Cybersecurity Risk for Power CPS

Cited by 16 publications

References 24 publications

Security risks in cyber physical systems—A systematic mapping study

Security risks in cyber physical systems—A systematic mapping study

Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies

Detecting Cyber Supply Chain Attacks on Cyber Physical Systems Using Bayesian Belief Network

Contact Info

Product

Resources

About