Risk-based methodology for real-time security monitoring of interdependent services in critical infrastructures

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 262-267

  Aubert, Jocelyn ^a   Schaberreiter, Thomas ^a   Incoul, Christophe ^a   Khadraoui, Djamel ^a   Gâteau, Benjamin ^a  

^a LUXEMBOURG INSTITUTE OF SCIENCE AND TECHNOLOGY   (Luxembourg)

Author keywords

CI interdependency; Critical infrastructure; Monitoring; Risk management; Security

Indexed keywords

CASCADING EFFECTS; CRITICAL INFRASTRUCTURE; DIFFERENT SERVICES; DISTRIBUTED SYSTEMS; REAL-TIME SECURITY; RISK-BASED; SECURITY FAILURE; SECURITY PROPERTIES;

PUBLIC WORKS; RISK MANAGEMENT;

NETWORK SECURITY;

EID: 77952346686     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.102     Document Type: Conference Paper

References (18)

1. "Directive of the council on the identification and designation of european critical infrastructure and the assessment of the need o improve their protection," 2006, com (2006) 787.
2. S. M. Rinaldi, J. P. Peerenboom, and T. K. Kelly, "Identifying, understanding, and analyzing critical infrastructure interde-pendencies," IEEE Control Systems Magazine, vol. 21, pp. 11-25, 2001.
3. S. Rinaldi, "Modeling and simulating critical infrastructures and their interdependencies," in System Sciences, 2004. Proceedings of the 37th Annual Hawaii International Conference on, Jan. 2004, pp. 8 pp.-.
4. "Integrated risk reduction of information-based infrastructure systems (irriis) project," online, August 2009, http:/www.irriis.org/.
5. "Critical utility infrastructural resilience (crutial) project," online, August 2009, http:/crutial.cesiricerca.it.
6. S. Chiaradonna, P. Lollini, and F. Di Giandomenico, "On a modeling framework for the analysis of interdependencies in electric power systems," in Dependable Systems and Networks, 2007. DSN 07. 37th Annual IEEE/IFIP International Conference on, June 2007, pp. 185-195.
7. J. Laprie, K. Kanoun, and M. Kaaniche, "Modelling interdependencies between the electricity and information infrastructures," Lecture Notes in Computer Science, vol. 4680, p. 54, 2007.
8. J. Sokolowski, C. D. Turnitsa, and S Y. Diallo, "A conceptual modeling method for critical infrastructure modeling," n Annual Simulation Symposium. IEEE Computer Society, 2008, pp. 203-211.
9. S. Panzieri, R. Setola, and G Ulivi, "An approach o model complex interdependent infrastructures," in Proceedings of the 16th IFAC World Congres. IEEE Computer Society, 2005.
10. M. Permann, "Toward developing genetic algorithms to aid in critical infrastructure modeling," in Technologies for Homeland Security 2007 IEEE Conference on, May 2007, pp. 192-197.
11. H Min, W. Beyeler, T. Brown, Y. Son, and A. Jones, "Toward modeling and simulation of critical national infrastructure interdependencies," IIE Transactions, vol. 39, no. 1, pp. 57-71, 2007.
12. N Svendsen and S. Wolthusen, "Graph Models of Critical Infrastructure Interdependencies," Lecture Notes in Computer Science, vol 4543, p. 208, 2007.
13. N K. Svendsen and S. D. Wolthusen, "Multigraph dependency models for heterogeneous infrastructures" in Critical Infrastructure Potection, 2007, pp. 337-350.
14. E. Adar and A. Wuchner, "Risk management for critical infrastructure protection (cip) challenges, best practices & tools," in Critical Infrastructure Protection, Fist IEEE International Workshop on, Nov. 2005, pp. 8 pp.-.
15. X. Tan, Y. Zhang, X. Cui, and H. X, "Using hidden markov models to evaluate the real-time risks of network," in Knowledge Acquisition and Modeling Workshop, 2008. KAM Workshop 2008. IEEE International Symposium on, Dec. 2008, pp. 490-493.
16. K. Haslum and A. Arnes, "Multisensor real-time risk assessment using continuous-time hidden markov models," in Computational Intelligence and Security 2006 International Conference on, vol. 2, Nov. 2006, pp. 1536-1540.
17. ISO 15408-1:2005, Part 1: Introduction and general model - Information technology - Security techniques - Evaluation criteria for IT security. SO, Geneva, Switzerland, 2005.
18. ISO 31000:2009, Risk management - Principles and guidelines. ISO, Geneva, Switzerland, 2009.