Cyber Security Risk Analysis Model Composed with Activity-quality and Architecture Model

Abstract

Extensive use of digital systems and networks is causing the problem of the cyber security to safety related industries like research reactors. The aim of cyber security study, in this article, is to develop a cyber-security risk analysis model based on activityquality & Instrumentation & Control (I&C) architecture for the safety of nuclear industry. Activity-quality is a qualitative number showing the extent to which systems or plant personnel are following the regulatory guidelines, for instance very well, well, good bad etc. Architecture assessment is performed in terms of vulnerability and mitigation measures against the cyber-attack. The activity-quality analysis model and the architecture analysis model are integrated in the cyber security risk model using Bayesian Network (BN). This model can helps us to identify key elements based on their final cyber security risk .