IEEE Transactions on Industrial Electronics · 2019 · 79 citations · 22 references
ComputingCybersecuritySystems EngineeringComputer SecurityCyber-physical SystemsGame TheoryCyber-physical SecurityCyber-physical Systems ArchitectureCyber-physical Systems DesignCyber-physical Systems ModelingIndustrial Cyber-physical SystemsSystem SimulationCross-layer SecurityCyber-physical Security ModelingCyber-physical System SecurityGame-theoretic OptimizationSecurity Decision-makingSecurity SimulationSimulation-based AnalysisSystem Losses
Current security measures in industrial cyber-physical systems (ICPS) lack the active decision capability to defend against highly-organized cyber-attacks. In this paper, a security decision-making approach based on stochastic game model is proposed to characterize the interaction between attackers and defenders in ICPSs and generate optimal defense strategies to minimize system losses. The major distinction of this approach is that it presents a practical way to build a cross-layer security game model for ICPSs by means of quantitative vulnerability analysis and time-based unified payoff quantification. A case study on a hardware-in-the-loop simulation testbed is carried out to demonstrate the feasibility of the proposed approach.
22
Attacks against process control systems
Álvaro A. Cárdenas, Saurabh Amin, Zong-Syun Lin et al. · 2011 · 693 citations
Common Vulnerability Scoring System
Peter Mell, Karen Scarfone, Sasha Romanosky · IEEE Security & Privacy · 2006 · 669 citations
A scalable approach to attack graph generation
Xinming Ou, Wayne F. Boyer, Miles McQueen · 2006 · 613 citations