A Model-Based Safety-Security Risk Analysis Framework for Interconnected Critical Infrastructures - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

A Model-Based Safety-Security Risk Analysis Framework for Interconnected Critical Infrastructures

Rajesh Kumar
  • Fonction : Auteur
  • PersonId : 1169642

Résumé

Interconnected infrastructures are complex due to their temporal evolution, component dependencies and dynamic interdependencies, coupled with the presence of adversaries. Much research has focused on safety and security risk assessments of isolated infrastructures. However, extending these techniques to interconnected infrastructures is infeasible due to their complex interdependencies and the lack of generic modeling tools.This chapter presents a framework for modeling and analyzing interconnected infrastructures. The framework has a two layers. One is the higher modeling layer that expresses the functional dependencies of infrastructures, where each infrastructure is refined to capture component-level disruptions and is represented using a novel combination of dynamic reliability block diagrams and attack-fault trees. The other is the lower analysis layer based on stochastic timed automata that serves as a semantic framework for the higher layer. While the higher layer graphically represents complex dependencies and interdependencies, and temporal and cascading disruption scenarios, the lower analysis layer provides a rigorous foundation for investigating the relationships using formal verification, in particular, statistical model checking. The lower layer also provides a flexible means for incorporating quantitative system attributes such as probability, time and cost. The efficacy of the framework is demonstrated using a real disruption scenario involving interconnected electric power and industrial communications networks, where an analyst can identify weak links, evaluate alternative protection measures and make transparent decisions about risk management investments.
Fichier principal
Vignette du fichier
497523_1_En_14_Chapter.pdf (452.39 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03794643 , version 1 (03-10-2022)

Licence

Identifiants

Citer

Rajesh Kumar. A Model-Based Safety-Security Risk Analysis Framework for Interconnected Critical Infrastructures. 14th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2020, Arlington, VA, United States. pp.283-306, ⟨10.1007/978-3-030-62840-6_14⟩. ⟨hal-03794643⟩
22 Consultations
33 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More