Coupled Petri nets for computer network risk analysis

International Journal of Critical Infrastructure Protection

Volumn 3, Issue 2, 2010, Pages 67-75

  Henry, Matthew H ^a   Layer, Ryan M ^a   Zaret, David R ^a  

^a JOHNS HOPKINS UNIVERSITY APPLIED PHYSICS LABORATORY   (United States)

Author keywords

Computer network attack modeling; Petri nets; Risk analysis

Indexed keywords

ANALYSIS TECHNIQUES; ATTACK ANALYSIS; COMPUTER NETWORK ATTACK MODELING; COMPUTER NETWORK ATTACKS; COVERABILITY; CYBER-ATTACKS; IN-PROCESS CONTROL; NETWORK HOSTS; NOVEL APPLICATIONS; PETRI NET REPRESENTATIONS; PROCESS FAILURE;

COMPUTER CRIME; FAILURE ANALYSIS; GRAPH THEORY; INTERNET; PETRI NETS; QUALITY ASSURANCE; RELIABILITY ANALYSIS; RISK ANALYSIS; RISK MANAGEMENT; SAFETY FACTOR;

RISK ASSESSMENT;

EID: 77955052106     PISSN: 18745482     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijcip.2010.05.002     Document Type: Article

References (18)

1. M. Henry, R. Layer, D. Zaret, Evaluating the risk of cyber attacks on SCADA systems via Petri net analysis with application to hazardous liquid loading operations, in: Proceedings of the IEEE International Conference on Technologies for Homeland Security, 2009, pp. 607-614.
2. A. Finkel, The minimal coverability graph for Petri nets, in: Proceedings of the Twelfth International Conference on Applications and Theory of Petri Nets, 1991, pp. 210-243.
3. Karp R., Miller R. Parallel program schemata. Journal of Computer and System Sciences 1969, 3(2):147-195.
4. E. Byres, M. Franz, D. Miller, The use of attack trees in assessing vulnerabilities in SCADA systems, in: Presented at the International Infrastructure Survivability Workshop, 2004.
5. Henry M., Haimes Y. A comprehensive network security risk model for process control networks. Risk Analysis 2009, 29(2):223-248.
6. M. McQueen, W. Boyer, M. Flynn, G. Beitel, Quantitative cyber risk reduction estimation methodology for a small SCADA control system, in: Proceedings of the Thirty-Ninth Hawaii International Conference on System Sciences, 2006, p. 226.
7. Lowrance W. Of Acceptable Risk 1976, William Kaufmann, Los Angeles, California.
8. O. Dahl, Using coloured petri nets in penetration testing, Master's Thesis, Department of Computer Science and Media Technology, Gjovik University College, Gjovik, Norway, 2005.
9. J. McDermott, Attack net penetration testing, in: Proceedings of the New Security Paradigms Workshop, 2000, pp. 15-21.
10. S. Zhou, Z. Qin, F. Zhang, X. Zhang, W. Chen, J. Liu, Colored Petri-net-based attack modeling, in: Proceedings of the Ninth International Conference on Rough Sets, Fuzzy Sets, Data Mining and Granular Computing, 2003, pp. 715-718.
11. K. Ingols, M. Chu, R. Lippmann, S. Webster, S. Boyer, Modeling modern network attacks and countermeasures using attack graphs, in: Proceedings of the Twenty-Fifth Annual Computer Security Applications Conference, 2009, pp. 81-90.
12. Esparza J. Decidability and complexity of Petri net problems - An introduction. Lecture Notes in Computer Science 1998, vol. 1491:374-428. Springer-Verlag, New York.
13. Murata T. Petri nets: Properties, analysis and applications. Proceedings of the IEEE 1989, 77(4):541-580.
14. Reisig W. Petri Nets: An Introduction 1985, Springer-Verlag, Berlin, Germany.
15. Haimes Y. Risk Modeling, Assessment and Management 2004, John Wiley, Hoboken, New Jersey.
16. Henry M., Haimes Y. Robust multiobjective dynamic programming: minimax envelopes for efficient decisionmaking under scenario uncertainty. Journal of Industrial and Management Optimization 2009, 5(4):791-824.
17. Balasubramanian N., Chang C., Wang Y. Petri net models for risk analysis of hazardous liquid loading operations. Industrial & Engineering Chemistry Research 2002, 41(19):4823-4836.
18. C. Xia, Property preservation by Petri-net-based refinements in system design, in: Proceedings of the Ninth International Conference for Young Computer Scientists, 2008, pp. 240-246.