Using hybrid attack graphs to model cyber-physical attacks in the Smart Grid

Proceedings - 2012 5th International Symposium on Resilient Control Systems, ISRCS 2012

Volumn , Issue , 2012, Pages 161-164

  Hawrylak, Peter J ^a   Haney, Michael ^a   Papa, Mauricio ^a   Hale, John ^a  

^a The University of Tulsa Tulsa   (United States)

Author keywords

Hybrid Attack Graph; Security; Smart Grid

Indexed keywords

ATTACK GRAPH; KEYPOINTS; POTENTIAL ATTACK; SECURITY; SMART GRID;

COMPUTER CRIME; CONTROL SYSTEMS; MODELS; SMART POWER GRIDS;

SECURITY OF DATA;

EID: 84868544559     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISRCS.2012.6309311     Document Type: Conference Paper

References (22)

1. G. Louthan, "Hybrid attack graphs for modeling cyber physical systems security," M.S. thesis, Tandy School of Computer Science, The University of Tulsa, Tulsa, OK, Nov. 2011.
2. G. Louthan, P. Hardwicke, P. Hawrylak, and J. Hale, "Toward hybrid attack dependency graphs," presented at 7th Annual Cyber Security and Information Intelligence Research Workshop, Oak Ridge, TN, 2011.
3. T. Tidwell, R. Larson, K. Fitch, and J. Hale. Modeling internet attacks. In Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, June 2001.
4. S. Noel and S. Jajodia. Managing attack graph complexity through visual hierarchical aggregation. In Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 109-118. ACM, 2004.
5. X. Ou, W.F. Boyer, and M.A. McQueen. A scalable approach to attack graph generation. In Proceedings of the 13th ACM conference on Computer and communications security, pages 336-345. ACM, 2006.
6. L.P. Swiler, C. Phillips, D. Ellis, and S. Chakerian. Computer-attack graph generation tool. In DARPA Information Survivability Conference & Exposition II, 2001. DISCEX'01. Proceedings, volume 2, pages 307-321. IEEE, 2001.
7. P. J. Hawrylak, G. Louthan IV, J. Daily, J. Hale and M. Papa, "Attack Graphs and Scenario Driven Wireless Computer Network Defense," Chapter in Situational Awareness in Computer Network Defense: Principles, Methods and Applications, Cyril Onwubiko and Thomas Owens, Ed., IGI Global, pp. 284-301, 2011, Hershey, PA.
8. N. Higgins, V. Vyatkin, N.-K.C. Nair, K. Schwarz, "Distributed Power System Automation With IEC 61850, IEC 61499, and Intelligent Control," IEEE Transactions on Systems, Man, and Cybernetics, Part C: Applications and Reviews, vol. 41, is. 1, pp. 81-92, Jan. 2011.
9. C.R. Ozansoy, A. Zayegh, A. Kalam, "The Application-View Model of the International Standard IEC 61850," IEEE Transactions on Power Delivery, vol. 24, no. 3, pp. 1132-1139, July 2009.
10. M. Ingram, R. Ehlers, "Toward Effective Substation Automation," IEEE Power and Energy Magazine, vol. 5, is. 3, pp. 67-73, May-June 2007.
11. P. Rietmann, P. Reinhardt, "Applying IEC 61850 to Substation Automation Systems," PSP 2006 Power System Protection Conference, Bled, Slovenia, Sept. 6-8, 2006.
12. R. Alur, C. Courcoubetis, T. A. Henzinger, and P.-H. Ho. Hybrid automata: An algorithmic approach to the specification and verification of hybrid systems. In Hybrid Systems I, Lecture Notes in Computer Science 736, pages 209-229. Springer-Verlag, 1993.
13. T.A. Henzinger. The Theory of Hybrid Automata. In 11th Annual IEEE Symposium on Logic in Computer Science: Proceedings, pages 278-292, New Brunswick, New Jersey, July 27-30 1996. IEEE Computer Society Press.
14. J.P. McDermott, "Attack net penetration testing", Proceedings of the 2000 Workshop on New Security Paradigms, pp 15-21, 2000
15. D. P. Mirembe and M. Muyeba, "Threat modeling revisited: improving expressiveness of attack nets," Second UKSIM European Symposium on Computer Modeling and Simulation, pp. 93-98, September, 2008.
16. M.H. Henry, R.M. Layer, and D.R. Zaret, "Coupled Petri nets for computer network risk analysis," International Journal of Critical Infrastructure Protection, vol. 3, issue 2, pp. 67-75, July, 2010.
17. G.C. Dalton, R.F. Mills, J.M. Colombi, and R.A. Raines, "Analyzing attack trees using generalized stochastic Petri nets," IEEE Information Assurance Workshop, pp. 116-123, June, 2006.
18. D. Xu and K.E. Nygard, "Threat-driven modeling and verification of secure software using aspect-oriented Petri nets", IEEE Transactions on Software Engineering, vol. 32, no. 4, April, 2006.
19. O.M. Dahl and S.D. Wolthusen, Modeling and execution of complex attack scenarios using interval timed colored Petri nets, presented at 4th IEEE International Workshop on Information Assurance, April, 2006.
20. M.H.Henry, R.M. Layer, K.Z. Snow, and D.R. Zaret, "Evaluating the risk of cyber attacks on SCADA systems via Petri net analysis with application to hazardous liquid loading operations", IEEE Conference on Technologies for Homeland Security, May, 2009.
21. T.M. Chen, J.C. Sanchez-Aarnoutse, J. Buford, "Petri Net Modeling of Cyber-Physical Attacks on Smart Grid," IEEE Transactions on Smart Grid, vol. 2, no. 4, pp. 741-749, Dec. 2011.
22. C. Ramchandani, Analysis of asynchronous concurrent systems by timed Petri nets, MIT Press, 1974.