Cyber-physical systems (CPSs) must consider both components failures and cyber-threats. In this paper, we propose the goal tree success tree master logic diagram (GTST-MLD) to analyze these within the same framework. The benchmark with a conventional attack tree (AT)-bow tie (BT) method of literature shows that GTST-MLD can overcome the limits of conventional AT-BT and requires less information to quantify the risk of a generic CPS, properly managing the scarcity of information on security threats. The method is applied to a CPS comprising of a chemical reactor and its control system that is exposed to cyber-attacks to the SCADA system.

Risk Analysis of Cyber-Physical Systems by GTST-MLD

Di Maio F.;Zio E.
2020-01-01

Abstract

Cyber-physical systems (CPSs) must consider both components failures and cyber-threats. In this paper, we propose the goal tree success tree master logic diagram (GTST-MLD) to analyze these within the same framework. The benchmark with a conventional attack tree (AT)-bow tie (BT) method of literature shows that GTST-MLD can overcome the limits of conventional AT-BT and requires less information to quantify the risk of a generic CPS, properly managing the scarcity of information on security threats. The method is applied to a CPS comprising of a chemical reactor and its control system that is exposed to cyber-attacks to the SCADA system.
Attack tree; bow tie; cyber-security; goal tree success tree (GTST); master logic diagram; risk analysis
File in questo prodotto:
File Dimensione Formato  
rev_Goal-oriented risk analysis of CPSs.pdf

accesso aperto

: Post-Print (DRAFT o Author’s Accepted Manuscript-AAM)
Dimensione 635.35 kB
Formato Adobe PDF
635.35 kB Adobe PDF Visualizza/Apri

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11311/1134280
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 3
  • ???jsp.display-item.citation.isi??? 2
social impact