Cyber security assessment of a power plant

Electric Power Systems Research

Volumn 81, Issue 2, 2011, Pages 518-526

  Nai Fovino, Igor ^a   Guidi, Luca ^b   Masera, Marcelo ^a   Stefanini, Alberto ^a  

^a JOINT RESEARCH CENTRE   (Italy)

^b ENEL   (Italy)

Author keywords

Critical infrastructures; Cybersecurity; Power plant security; Security assessment

Indexed keywords

ARCHITECTURAL WEAKNESS; COMPLEX SYSTEMS; CRITICAL INFRASTRUCTURE; CYBER SECURITY; CYBER-ATTACKS; ICT SECURITY ASSESSMENT; INFORMATION AND COMMUNICATION TECHNOLOGIES; MALICIOUS ATTACK; OPERATIONAL POWER; POTENTIAL OUTCOMES; POWER PLANT SECURITY; SECURITY ASSESSMENT; SECURITY THREATS;

COMPUTER CRIME; POWER PLANTS; PUBLIC WORKS; RATING;

NETWORK SECURITY;

EID: 78650587262     PISSN: 03787796     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.epsr.2010.10.012     Document Type: Article

References (17)

1. A. Creery, and E. Byres Industrial Cybersecurity for Power System and SCADA Networks July-August 2007 IEEE Industry Application Magazine
2. R. Chandia, J. Gonzalez, T. Kilpatrick, M. Papa, and S. Shenoi Security strategies for SCADA networks Proceeding of the First Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection Dartmouth College, Hanover, New Hampshire, USA, March 19-21 2007
3. M. Majdalawieh, F. Parisi-Presicce, and D. Wijesekera Distributed network protocol security (DNPSec) security framework Proceedings of the 21st Annual Computer Security Applications Conference Tucson, Arizona, December 5-9 2005
4. J.H.C.S. Hong, S. Ho Ju, Y.H. Lim, B.S. Lee, and D.H. Hyun A security mechanism for automation control in PLC-based networks Proceedings of the ISPLC 2007. IEEE International Symposium on Power Line Communications and Its Applications Pisa, Italy, March 26-28 2007 466 470
5. T. Mander, F. Nabhani, L. Wang, and R. Cheung Data object based security for DNP3 over TCP/IP for increased utility commercial aspects security Proceedings of the Power Engineering Society General Meeting, Tampa FL, USA, June 24-28 2007 IEEE Los Alamitos 1 8
6. ISO 17799, http://www.iso.org/.
7. D. Raptis, T. Dimitrakos, B.A. Gran, and K. Stølen The CORAS approach for model-based risk analysis applied to the e-commerce domain Proceedings of the Communication and Multimedia Security (CMS-2002) 2002 Kluwer 169 181
8. Secrétariat général de la défense nationale - Direction centrale de la sécurité des systmes d'information, Leaflet on The EBIOS Method, Expression of Needs and Identification of Security Objectives, 2003, http://www.ssi.gouv.fr/en/confidence/documents/methods/ ebiosv2-methode-plaquette-2003-09-01-en.pdf.
9. I. Nai Fovino, and M. Masera A service oriented approach to the assessment of infrastructure security Proceeding of the First Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection Dartmouth College, Hanover, New Hampshire, USA, March 19-21 2007
10. C. Alberts, and A. Dorofee Managing Information Security Risks: The OCTAVE (SM) Approach July 2002 Addison Wesley Professional
11. B. Schneier Attack Trees Dr. Dobb's Journal 24 December (12) 1999
12. I. Nai Fovino, and M. Masera Through the description of attacks: a multidimensional view Proceeding of the 25th International Conference on Computer Safety, Reliability and Security Gdansk, Poland, September 26-29 2006
13. I. Nai Fovino, A. Carcano, M. Masera, and A. Trombetta SCADA Malware, a proof of concept Proceedings of the 3rd International Workshop on Critical Information Infrastructures Security Frascati, Rome, Italy, October 13-15 2008
14. Critical Infrastructure Protection, Challenges and Efforts to Secure Control Systems, United States Government Accountability Office, GAO-04-628T, 2004.
15. R. Leszczyna, I. Nai Fovino, and M. Masera Simulating Malware with MAlSim Proceeding of the 17th EICAR Annual Conference Laval, France 2008
16. R. Leszczyna, I. Nai Fovino, and M. Masera MAlSim - mobile agent malware simulator Proceedings of the First International Conference on Simulation Tools and Techniques for Communications Networks and Systems, Marseille 2008
17. I. Nai Fovino, A. Carcano, T. De Lacheze Murel, M. Masera, and A. Trombetta Distributed critical state detection system for industrial protocols Proceeding of the Forth Annual IFIP International Conference on Critical Infrastructure Protection Washington, DC, USA, March 14-17 2001