Models for reducing the risk of critical networkedinfrastructures

International Journal of Risk Assessment and Management

Volumn 15, Issue 2-3, 2011, Pages 99-127

  Medal, Hugh ^a   Sharp, Stevenson J ^a   Pohl, Ed ^a   Rainwater, Chase ^a   Mason, Scott J ^b  

^a University of Arkansas   (United States)

^b Clemson University   (United States)

Author keywords

Critical infrastructure; Disruptions; Fortification; Interdiction; Mitigation; Networks; Protection; Reliability; Risk; Risk assessment; Risk management

Indexed keywords

EID: 80052222007     PISSN: 14668297     EISSN: 17415241     Source Type: Journal    
DOI: 10.1504/IJRAM.2011.042112     Document Type: Article

References (105)

1. Ahuja, R., Magnanti, T. and Orlin, J. (1993) Network Flows: Theory, Algorithms, andApplications, Prentice-Hall, Englewood Cliffs, NJ.
2. Aksen, D., Piyade, N. and Aras, N. (2009) 'The budget constrained r-interdiction median problem with capacity expansion', Central European Journal of Operations Research, pp.1-23.
3. Albert, R., Jeong, H. and Barabasi, A. (2000) 'Error and attack tolerance of complex networks', Nature, Vol. 406, No. 6794, pp.378-382. (Pubitemid 30625551)
4. Alderson, D.L. (2008) 'Catching the 'network science' bug: insight and opportunity for the operations researcher', OperationsResearch, Vol. 56, No. 5, pp.1047-1065.
5. Ambs, K., Cwilich, S., Deng, M., Houck, D., Lynch, D. and Yan, D. (2000) 'Optimizing restoration capacity in the AT&T network', Interfaces, Vol. 30, No. 1, pp.26-44.
6. Azaiez, M. and Bier, V. (2007) 'Optimal resource allocation for security in reliability systems', European Journal ofOperationalResearch, Vol. 181, No. 2, pp.773-786. (Pubitemid 46413583)
7. Balakrishnan, A., Magnanti, T. and Sokol, J. (2001) 'Telecommunication link restoration planning with multiple facility types', Annals of Operations Research, Vol. 106, pp.127-154. (Pubitemid 33637489)
8. Balakrishnan, A., Magnanti, T.L., Sokol, J.S. and Wang, Y. (2002) 'Spare-capacity assignment for line restoration using a single-facility type', Operations Research, Vol. 50, No. 4, pp.617-635.
9. Barabasi, A-L. and Albert, R. (1999) 'Emergence of scaling in random networks', Science, Vol. 286, No. 5439, pp.509-612.
10. Beygelzimer, A., Grinstein, G., Linsker, R. and Rish, I. (2005) 'Improving network robustness by edge modification', Physica A: Statistical Mechanics and its Applications, Vol. 357, Nos. 3-4, pp.593-612. (Pubitemid 41285211)
11. Bier, V. and Abhichandani, V. (2003) 'Optimal allocation of resources for defense of simple series and parallel systems from determined adversaries', in Risk-based Decision Making in Water Resources X: Proceedings of the Tenth Conference, American Society of Civil Engineers, Santa Barbara, California, 3-8 November, p.59
12. Bier, V. M., Nagaraj, A. and Abhichandani, V. (2005) 'Protection of simple series and parallel systems with components of different values', Reliability Engineering and System Safety, Vol. 87, No. 3, pp.315-323.
13. Bier, V., Cox, L. and Azaiez, M. (2009) 'Why both game theory and reliability theory are important in defending infrastructure against intelligent attacks', in Game Theoretic RiskAnalysis of Security Threats, Springer.
14. Bier, V., Gratz, E., Haphuriwat, N., Magua, W. and Wierzbicki, K. (2007a) 'Methodology for identifying near-optimal interdiction strategies for a power transmission system', Reliability Engineering andSystem Safety, Vol. 92, No. 9, pp.1155-1161. (Pubitemid 46341792)
15. Bier, V., Oliveros, S. and Samuelson, L. (2007b) 'Choosing what to protect: strategic defensive allocation against an unknown attacker', Journal of Public Economic Theory, Vol. 9, No. 4, p.563.
16. Bier, V.M. (2007) 'Choosing what to protect', Risk Analysis, Vol. 27, No. 3, pp.607-620. (Pubitemid 47063172)
17. Bier, V.M., Haphuriwat, N., Menoyo, J., Zimmerman, R. and Culpen, A.M. (2008) 'Optimal resource allocation for defense of targets based on differing measures of attractiveness', Risk Analysis, Vol. 28, No. 3, pp.763-770. (Pubitemid 351847236)
18. Birge, J.R. and Louveaux, F. (1997) Introduction to Stochastic Programming, Springer-Verlag, New York.
19. Brown, G., Carlyle, M., Salmerffon, J. and Wood, K. (2005) 'Analyzing the vulnerability of critical infrastructure to attack and planning defenses', in J.C. Smith (Ed.): INFORMS Tutorials in OperationsResearch, pp.102-123, INFORMS, Baltimore, MD.
20. Brown, P. (2005) 'Optimizing the long-term capacity expansion and protection of Iraqi oil infrastructure', Master thesis, Naval Postgraduate School.
21. Buldyrev, S., Parshani, R., Paul, G., Stanley, H. and Havlin, S. (2010) 'Catastrophic cascade of failures in interdependent networks', Nature, Vol. 464, No. 7291, pp.1025-1028.
22. Cappanera, P. and Scaparra, M. (to appear) 'Optimal allocation ofprotective resources in shortest-path networks', Transportation Science.
23. Chang, S.E. (2009) 'Infrastructure resilience to disasters', The Bridge, Vol. 39, No. 4, pp.36-41.
24. Chekuri, C., Gupta, A., Kumar, A., Naor, J. and Raz, D. (2005) 'Building edge-failure resilient networks', Algorithmica, Vol. 43, Nos. 1-2, pp.17-41. (Pubitemid 41203680)
25. Church, R. (2003) 'COBRA: a new formulation of the classic p-median location problem', Annals of Operations Research, Vol. 122, No. 1, pp.103-120. (Pubitemid 38103393)
26. Church, R. and ReVelle, C. (1974) 'The maximal covering location problem', Papers in Regional Science, Vol. 32, No. 1, pp.101-118.
27. Church, R. and Scaparra, M. (2007) 'Protecting critical assets: the r-interdiction median problem with fortification', Geographical Analysis, Vol. 39, No. 2, pp.129-146. (Pubitemid 46431805)
28. Church, R.L. and Scaparra, M.P. (2006) 'Analysis of facility systems reliability when subject to attack or a natural disaster', in A.T. Murray and T.H. Grubesic (Eds.): Critical Infrastructure: Reliability and Vulnerability, pp.221-241, Chapter 11, Springer-Verlag, Berlin, Germany
29. Church, R., Scaparra, M. and Middleton, R. (2004) 'Identifying critical infrastructure: the median and covering facility interdiction problems', Annals of the Association of American Geographers, Vol. 94, No. 3, pp.491-502. (Pubitemid 41716604)
30. Corley H.W., Jr. and Chang, H. (1974) 'Finding the n most vital nodes in a flow network', Management Science, Vol. 21, No. 3, pp.362-364.
31. Costa, L.D. (2004) 'Reinforcing the resilience of complex networks', Phys. Rev. E, Vol. 69, No. 6, pp.066127-1-066127-7.
32. Cui, T., Ouyang, Y. and Shen, Z. (to appear) 'Reliable facility location under the risk of disruptions', Operations Research.
33. Cunningham, W. (1985) 'Optimal attack and reinforcement of a network', Journal of the Association for Computing Machinery, Vol. 32, No. 3, pp.549-561.
34. DallAsta, L., Barrat, A., Barthelemy, M. and Vespignani, A. (2006) 'Vulnerability of weighted networks', Journal of Statistical Mechanics: Theory and Experiment, Vol. 2006, No. 4, p.04006.
35. Daskin, M. (1983) 'A maximum expected covering location model: formulation, properties and heuristic solution', Transportation Science, Vol. 17, No. 1, pp.48-70. (Pubitemid 13509846)
36. Department of Homeland Security (2002) National Strategy for Homel and Security.
37. Dighe, N., Zhuang, J. and Bier, V. (2009) 'Secrecy in defensive allocations as a strategy for achieving more cost-effective attacker deterrence', International Journal ofPerformability Engineering, Vol. 5, No. 1, pp.31-43.
38. Dong, L., Xing-hua, K. and Xiang-tao, Y. (2009) 'A model for supply chain critical facility protection planning based on time satisfaction', in Proceedings of the 2009 Second International Conference on Intelligent Computation Technology and Automation, EEE Computer Society Vol. 3, pp.903-906.
39. Erdos, P. and Renyi, A. (1959) On random graphs', Publicationes Mathematicae Debrecen, Vol. 6, Nos. 290-297, p.156.
40. Golany, B., Kaplan, E., Marmur, A. and Rothblum, U. (2009) 'Nature plays with dice-terrorists do not: allocating resources to counter strategic versus probabilistic risks', European Journal of Operational Research, Vol. 192, No. 1, pp.198-208.
41. Grigg, C., Wong, P., Albrecht, P., Allan, R., Bhavaraju, M., Billinton, R., Chen, Q., Fong, C., Haddad, S., Kuruganty S. et al. (1999) 'The IEEE reliability test system-1996. A report prepared by the reliability test system task force of the application ofprobability methods subcommittee', IEEE Transactions on Power Systems, Vol. 14, No. 3, pp.1010-1020.
42. Grubesic, T., Matisziw, T., Murray A. and Snediker, D. (2008) 'Comparative approaches for assessing network vulnerability', International Regional Science Review, Vol. 31, No. 1, p.88.
43. Hausken, K. (2002) 'Probabilistic risk analysis and game theory', Risk Analysis, Vol. 22, No. 1, pp.17-27. (Pubitemid 34262684)
44. Hausken, K. (2007) 'Protecting infrastructures from strategic attackers', in Proceedings of the 2007 European Safety and Reliability Conference, Stavanger, Norway Vol. 1, pp.881-887.
45. Hausken, K. (2008a) 'Strategic defense and attack for series and parallel reliability systems', European Journal ofOperational Research, Vol. 186, No. 2, pp.856-881. (Pubitemid 47615325)
46. Hausken, K. (2008b) 'Strategic defense and attack for reliability systems', Reliability Engineering andSystem Safety, Vol. 93, No. 11, pp.1740-1750.
47. Hausken, K. and Levitin, G. (2009a) 'Protection vs. false targets in series systems', Reliability Engineering andSystem Safety, Vol. 94, No. 59, pp.73-81.
48. Hausken, K., Bier, V. and Zhuang, J. (2009) 'Defending against terrorism, natural disaster, and all hazards', Game Theoretic Risk Analysis of Security Threats, Springer, New York, pp.65-97.
49. Holmgren, A.J., Jenelius, E. and Westin, J. (2007) 'Evaluating strategies for defending electric power networks against antagonistic attacks', IEEE Transactions on Power Systems, Vol. 22, No. 1, pp.76-84. (Pubitemid 46442139)
50. Horst, R., Pardalos, P. and Van Thoai, N. (2000) Introduction to Global Optimization, Springer.
51. Israeli, E. and Wood, R. (2002) 'Shortest-path network interdiction', Networks, Vol. 40, No. 2, pp.97-111. (Pubitemid 37218345)
52. Jenelius, E., Westin, J. and Holmgren, J. (2010) 'Critical infrastructure protection under imperfect attacker perception', International Journal of Critical Infrastructure Protection, Vol. 3, No. 1, pp.16-26.
53. Kennington, J., Nair, V. and Spiride, G. (2007a) 'A decomposition approach for spare capacity assignment for path restorable mesh networks', International Journal of Computers and Applications, Vol. 29, No. 2, pp.170-179.
54. Kennington, J., Olinick, E. and Spiride, G. (2007b) 'Basic mathematical programming models for capacity allocation in mesh-based survivable networks', Omega, Vol. 35, No. 6, pp.629-644.
55. Lee, K., Park, K., Park, S. and Lee, H. (1998) 'Economic spare capacity planning for DCS mesh-restorable networks', European Journal of Operational Research, Vol. 110, No. 1, pp.63-75. (Pubitemid 128401884)
56. Levitin, G. and Hausken, K. (2008) 'Protection vs. redundancy in homogeneous parallel systems', Reliability Engineering and System Safety, Vol. 93, No. 10, pp.1444-1451.
57. Levitin, G. and Hausken, K. (2009a) 'Meeting a demand vs. enhancing protections in homogeneous parallel systems', Reliability Engineering and System Safety, Vol. 94, No. 11, pp.1711-1717.
58. Levitin, G. and Hausken, K. (2009b) 'False targets vs. redundancy in homogeneous parallel systems', Reliability Engineering and System Safety, Vol. 94, No. 2, pp.588-595.
59. Levitin, G. and Hausken, K. (2009c) 'Redundancy vs. protection vs. false targets for systems under attack', IEEE Transactions on Reliability, Vol. 58, No. 1, pp.58-68.
60. Liberatore, F., Scaparra, M. and Daskin, M. (2011) 'Analysis offacility protection strategies against uncertain numbers of attacks: the stochastic r-interdiction median problem with fortification', Computers andOperations Research, Vol. 38, No. 1, pp.357-366.
61. Lim, M., Daskin, M., Chopra, S. and Bassamboo, A. (2010a) 'A facility reliability problem: formulation, properties, and algorithm', Naval Research Logistics, Vol. 57, No. 1, pp.8-70.
62. Lim, M., Daskin, M., Chopra, S. and Bassamboo, A. (2010b) 'Solving interdictor-defender bilevel optimization: a two population genetic algorithm approach', Technical report, University of Illinois.
63. Liu, C., Fan, Y. and Ordonez, F. (2009) 'A two-stage stochastic programming model for transportation network protection', Computers and Operations Research , Vol. 36, No. 5, pp.1582-1590.
64. Ma, Y. and Wu, H. (2006) 'Definitions and curve fitting of time satisfaction functions in facility location problems', in Proceedings of the 2006 International Conference on Management Science and Engineering, Piscataway NJ, USA, Vol. 1, pp.429-433.
65. Michaels, D., McGrath, S. and Pasztor, A. (2010) 'Airports reopen, safety debate lingers', WallStreet Journal, available at http://online.wsj.com.
66. Morehead, R. and Noore, A. (2007) 'Novel hybrid mitigation strategy for improving the resiliency of hierarchical networks subjected to attacks', Physica A, Vol. 378, No. 2, pp.603-612. (Pubitemid 46389558)
67. Murray A., Matisziw, T. and Grubesic, T. (2008) 'A methodological overview ofnetwork vulnerability analysis', Growth and Change, Vol. 39, No. 4, pp.573-592.
68. O'Hanley J.R., Church, R.L. and Gilless, J.K. (2007) 'Locating and protecting critical reserve sites to minimize expected and worst-case losses', Biological Conservation, Vol. 134, No. 1, pp.130-141. (Pubitemid 44754764)
69. Peeta, S., Salman, F.S., Gunnec, D. and Viswanath, K. (2010) 'Pre-disaster investment decisions for strengthening a highway network', Computers & Operations Research, Vol. 37, No. 10, pp.1708-1719.
70. Peng, R., Levitin, G., Xie, M. and Ng, S. (2010) 'Defending simple series and parallel systems with imperfect false targets', Reliability Engineering and System Safety, Vol. 95, No. 6, pp.679-688.
71. Powell, R. (2007a) 'Allocating defensive resources with private information about vulnerability', American Political Science Review, Vol. 101, No. 4, pp.799-809.
72. Powell, R. (2007b) 'Defending against terrorist attacks with limited resources', American Political Science Review, Vol. 101, No. 3, pp.527-541.
73. Qiao, J., Jeong, D., Lawley M., Richard, J-P., Abraham, D. and Yih, Y. (2007) 'Allocating security resources to a water supply network', IIE Transactions, Vol. 39, No. 1, pp.95-109. (Pubitemid 44688394)
74. Rail Report: Rail Customer News and Information (2005) 'Rails cause utility fuel shortages, electricity rate hikes', available at http://www.railcure.org/pdf/newsletter0805.pdf (accessed on 8 October 2010).
75. Ramirez-Marquez, J.E., Rocco, C.M. and Levitin, G. (2009) 'Optimal protection ofgeneral source-sink networks via evolutionary techniques', Reliability Engineering and System Safety, Vol. 94, No. 10, pp.1676-1684.
76. Ryoo, H-S. and Sahinidis, N.V. (2003) 'Global optimization of multiplicative programs', Journal of Global Optimization, Vol. 26, No. 4, pp.387-418.
77. San Martin, P. (2007) 'Tri-level optimization models to defend critical infrastructure', Master thesis, Naval Postgraduate School.
78. Santos, J. (2006) 'Inoperability input-output modeling of disruptions to interdependent economic systems', Systems Engineering, Vol. 9, No. 1, pp.20-34. (Pubitemid 43331714)
79. Scaparra, M. and Church, R. (2008a) 'An exact solution approach for the interdiction median problem with fortification', European Journal of Operational Research, Vol. 189, No. 1, pp.76-92. (Pubitemid 351232143)
80. Scaparra, M.P. and Church, R.L. (2008b) 'A bilevel mixed-integer program for critical infrastructure protection planning', Computers and Operations Research, Vol. 35, No. 6, pp.1905-1923. (Pubitemid 47615235)
81. Schavland, J., Chan, Y. and Raines, R.A. (2009) 'Information security: designing a stochastic-network for throughput and reliability', Naval Research Logistics, Vol. 56, pp.625-641.
82. Sivaraman, R. (2007) 'Capacity expansion in contemporary telecommunication networks', PhD thesis, MassachusettsInstituteofTechnology Skaperdas, S. (1996) 'Contest success functions', Economic Theory, Vol. 7, No. 2, pp.283-290.
83. Smith, J.C. (2011) Wiley Encyclopedia of Operations Research and Management Science, chapter Basic Interdiction Models.
84. Smith, J.C. and Lim, C. (2008) Pareto Optimality, Game Theory and Equilibria, chapter Algorithms for Network Interdiction and Fortification Games, Springer New York, pp.609-644.
85. Snyder, L. and Daskin, M. (2007) 'Models for reliable supply chain network design', in A.T. Murray and T.H. Grubesic, (Eds.): Critical Infrastructure: Reliability and Vulnerability, pp.257-289, Chapter 13, Springer-Verlag, Berlin, Germany
86. Snyder, L. and Daskin, M. (2005) 'Reliability models for facility location: the expected failure cost case', Transportation Science, Vol. 39, No. 3, pp.400-416. (Pubitemid 41344665)
87. Snyder, L., Scaparra, M., Daskin, M. and Church, R. (2006) Planning for Disruptions in Supply Chain Networks, Baltimore, MD.
88. Snyder, L.V. and Daskin, M.S. (2006) 'Stochastic p-robust location problems', IIE Transactions, Vol. 38, No. 11, pp.971-985. (Pubitemid 44355861)
89. Snyder, L.V., Atan, Z., Peng, P., Rong, Y., Schmitt, A.J. and Sinsoysalk, B. (2010) 'OR/MS models for supply chain disruptions: a review', Submitted draft, Lehigh University available at http://papers.ssrn.com/sol3/papers.cfm? abstractid=1689882.
90. Sullivan, J.L., Aultman-Hall, L. and Novak, D.C. (2009) 'A review of current practice in network disruption analysis and an assessment of the ability to account for isolating links in transportation networks', Transportation Letters, Vol. 1, pp.271-280
91. The Department of Homeland Security Risk Steering Committee (2008) 'DHS risk Lexicon', Technical report, Department ofHomeland Security, Washington, DC United States-Canada Power System
92. Outage Task Force (2004) Final report on the August 14th blackout in the United States and Canada.
93. Veerasamy J., Venkatesan, S. and Shah, J.C. (1999) 'Spare capacity assignment in telecom networks using path restoration and further improvement using traffic splitting', Journal of Systems and Software, Vol. 47, No. 1, pp.27-33.
94. Vespignani, A. (2010) 'The fragility of interdependency', Nature, Vol. 464, No. 7291, pp.984-985.
95. Wallace, S. (1987) 'Investing in arcs in a network to maximize the expected max flow', Networks, Vol. 17, No. 1, pp.87-103.
96. Watts, D. and Strogatz, S. (1998) 'Collective dynamics of 'small-world' networks', Nature, Vol. 393, No. 6684, pp.440-442. (Pubitemid 28292183)
97. Wood, R. (1993) 'Deterministic networkinterdiction', Mathematical and Computer Modelling, Vol. 17, No. 2, pp.1-18.
98. Yao, Y., Edmunds, T., Papageorgiou, D. and Alvarez, R. (2007) 'Trilevel optimization in power network defense', IEEE Transactions on Systems Man and Cybernetics Part C, Vol. 37, No. 4, p.712.
99. Zhan, R. (2007) 'Models and algorithms for reliable facility location problems and system reliability optimization', PhD thesis, University Of Florida.
100. Zhao, J. and Xu, K. (2009) 'Enhancing the robustness of scale-free networks', Journal of Physics A: Mathematical and Theoretical, Vol. 42, p.195003.
101. Zhuang, J. and Bier, V. (2008) 'Katrina vs. 9/11 how should we optimally protect against both? in H. Richardson, P. Gordon and J. Moore II (Eds.): Post-Katrina: Economics, SocialAspects, and Risk, pp.71-83, Chapter 4, Edward Elgar Publishing.
102. Zhuang, J. and Bier, V. (to appear) 'Secrecy and deception at equilibrium, with applications to anti-terrorism resource allocation', Defence and Peace Economics.
103. Zhuang, J. and Bier, V.M. (2007) 'Balancing terrorism and natural disasters-defensive strategy with endogenous attacker effort', Operations Research, Vol. 55, No. 5, pp.976-991. (Pubitemid 351159542)
104. Zimmerman, R. (2004) 'Decision-making and the vulnerability of interdependent critical infrastructure', in Proceedings of the 2004 IEEE International Conference on Systems, Man and Cybernetics, IEEE, Vol. 5, pp.4059-4063. (Pubitemid 40415663)
105. Zimmerman, R. and Restrepo, C. (2006) 'The next step: quantifying infrastructure independencies to improve security', International Journal of Critical Infrastructures, Vol. 2, No. 2, pp.215-230.