A model-based approach for assessing the security of cyber-physical systems - Equipe Autonomic and Critical Embedded Systems
Conference Papers Year : 2024

A model-based approach for assessing the security of cyber-physical systems

Abstract

Cyber-Physical Systems (CPSs) complexity has been continuously increasing to support new life-impacting applications, such as Internet of Things (IoT) devices or Industrial Control Systems (ICSs). These characteristics introduce new critical security challenges to both industrial practitioners and academics. This work investigates how Model-Based System Engineering (MBSE) and attack graph approaches could be leveraged to model secure Cyber-Physical System solutions and identify high-impact attacks early in the system development life cycle. To achieve this, we propose a new framework that comprises (1) an easily adoptable modeling paradigm for Cyber-Physical System representation, (2) an attack-graph-based solution for Cyber-Physical System automatic quantitative security analysis, based on the MulVAL security tool, (3) a set of Model-To-Text (MTT) transformation rules to bridge the gap between SysML and MulVAL. We illustrated the validity of our proposed framework through an autonomous ventilation system example. A Denial of Service (DoS) attack targeting an industrial communication protocol was identified and displayed as attack graphs. In future work, we intend to connect the approach to dynamic security databases for automatic countermeasure selection.
Fichier principal
Vignette du fichier
A_Model-based_Approach_for_Assessing_the_Security_of_Cyber-Physical_Systems.pdf (634.58 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-04669279 , version 1 (08-08-2024)

Identifiers

Cite

Hugo Teixeira de Castro, Ahmed Hussain, Gregory Blanc, Jamal El Hachem, Dominique Blouin, et al.. A model-based approach for assessing the security of cyber-physical systems. The 19th International Conference on Availability, Reliability and Security (ARES) (2024), Jul 2024, Vienne, Austria. pp.1-10, ⟨10.1145/3664476.3670470⟩. ⟨hal-04669279⟩
312 View
110 Download

Altmetric

Share

More