Thinking in Systems, Sifting Through Simulations: A Way Ahead for Cyber Resilience Assessment

Abstract

The interaction between the physical world and information technologies creates advantages and novel emerging threats. Cyber-physical systems (CPSs) result vulnerable to cyber-related disruptive scenarios, and, for some critical systems, cyber failures may have fallouts on society and environment. Traditional risk analysis in no more sufficient to deal with these problems. New techniques are gaining increasing consensus, especially those based on systems theory. In this context, the System-Theoretic Process Analysis for Security (STPA-Sec) extends the Systems-Theoretic Accident Modelling and Processes (STAMP) model considering cyber threats, and identifying unsafe and unsecure controls throughout a cyber socio-technical system. Despite its large usage as a descriptive tool, there is still limited use of STPA-Sec in (semi-)quantitative terms. This article presents System-Theoretic Process Analysis for Security with Simulations (STPA-Sec/S), a methodological interface between STPA-Sec and quantitative resilience assessment based on simulation models. The methodology is instantiated in a demonstrative case study of a water treatment plant, and its critical CPSs which may impact both community health, and environment. The obtained results show how STPA-Sec/S foster systems understanding, allow a systematic identification of its major criticalities, and the respective quantification.INDEX TERMS Cyber security, cyber-socio-technical systems, hazard analysis, industrial systems engineering, resilience management, systems modeling.Open Access funding provided by 'Università degli Studi di Roma ''La Sapienza''' within the CRUI CARE Agreement

The Challenges of Blood Sample Delivery via Drones in Urban Environment: A Feasibility Study through Specific Operation Risk Assessment Methodology

“…In this framework, more sophisticated trajectory optimization approaches could also be considered, evolving the simple one presented in this research. Similarly, it may be useful to investigate indirect risks, such as drivers' distractions when flying over motorways, or incidents caused by the drone failure on the ground, as well as the implications of security, and cyber-security, which demand for the integration of systemic approaches [63].…”

A Testing and Verification Approach to Tune Control Parameters of Cooperative Driving Automation Under False Data Injection Attacks

“…Discussed in [44] is the need for advanced techniques in assessing the cybersecurity of cyber-physical systems and introduces the System-Theoretic Process Analysis for Security (STPA-Sec) model, emphasizing its potential for (semi-)quantitative analysis through the newly proposed System-Theoretic Process Analysis for Security with Simulations (STPA-Sec/S) approach, illustrated in a water treatment plant case study.…”

Cyber-Resilience Evaluation Methods Focusing on Response Time to Cyber Infringement

“…A system-theoretic process analysis for security through simulation (STPA-Sec/S) was proposed by Simone et al, marking a methodological bridge between STPA-Sec and quantitative resilience assessment grounded in simulation models. Once the systemstheoretic accident modeling and processes (STAMP) model, which addresses cyber threats and spots insecure controls within cyber-social technology systems, was expanded, it was posited that cyber resilience can be quantitatively determined based on systems-theoretic modeling [13].…”

“…Simone et al [13] Cyber resilience is applied based on cyberattack narratives, without giving precedence to specific scenarios.…”