A probabilistic model to predict the survivability of SCADA systems

IEEE Transactions on Industrial Informatics

Volumn 9, Issue 4, 2013, Pages 1975-1985

  Queiroz, Carlos ^a   Mahmood, Abdun ^b   Tari, Zahir ^a  

^a RMIT UNIVERSITY   (Australia)

^b UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

Bayesian networks; Metrics; Security; Supervisory control and data acquisition (SCADA) systems; Survivability

Indexed keywords

CRITICAL INFRASTRUCTURE SYSTEMS; MEASUREMENT TECHNIQUES; METRICS; PROBABILISTIC MODELING; SECURITY; SERVICE BEHAVIORS; SUPERVISORY CONTROL AND DATAACQUISITION SYSTEMS (SCADA); SURVIVABILITY;

BAYESIAN NETWORKS; SCADA SYSTEMS;

COMPUTER SIMULATION;

EID: 84886713375     PISSN: 15513203     EISSN: None     Source Type: Journal    
DOI: 10.1109/TII.2012.2231419     Document Type: Article

References (36)

1. A. Carcano, A. Coletta, M. Guglielmi,M.Masera, I. Nai Fovino, and A. Trombetta, "A multidimensional critical state analysis for detecting intrusions in SCADA systems," IEEE Trans. Ind. Inf., vol. 7, no. 2, pp. 179-186, May 2011.
2. J. Kolbusz, S. Paszczynski, and B. Wilamowski, "Network traffic model for industrial environment," IEEE Trans. Ind. Inf., vol. 2, no. 4, pp. 213-220, Dec. 2006. (Pubitemid 44837063)
3. M. Cheminod, A. Pironti, and R. Sisto, "Formal vulnerability analysis of a security system for remote fieldbus access," IEEE Trans. Ind. Inf., vol. 7, no. 1, pp. 30-40, Feb. 2011.
4. N. Falliere, L. O. Murchu, and E. Chien, "W32.stuxnet Dossier," Symantec, Mountain View, CA, USA, Tech. Rep. 1.4, 2011.
5. S. Patel and P. Sanyal, "Securing SCADA systems," Inf. Manag. Comput. Sec., vol. 16, no. 4, pp. 398-414, Jan. 2008.
6. V. Igure, S. Laughter, and R. Williams, "Security issues in SCADA networks," Comput. Sec., vol. 25, no. 7, pp. 498-506, 2006. (Pubitemid 44637241)
7. M. Coutinho, G. Lambert-Torres, and L. B. d. Silva, "Improving a methodology to extract rules to identify attacks in power system critical infrastructure: New results," in Proc. IEEE Transmiss. Distrib. Conf. Expo. (PES), Jan. 2008, vol. 1, pp. 1-6.
8. M. Long, C. Wu, and J. Hung, "Denial of service attacks on networkbased control systems: Impact and mitigation," IEEE Trans. Ind. Inf., vol. 1, no. 2, pp. 85-96, May 2005. (Pubitemid 40786123)
9. M. Brock and A. Goscinski, "Toward a framework for cloud security," in Algorithms and Architectures for Parallel Processing, C.-H. Hsu, L. Yang, J. Park, and S.-S. Yeo, Eds. Berlin, Germany: Springer, 2010, vol. 6082, Lecture Notes in Computer Science, pp. 254-263.
10. R. Ellison, D. Fisher, R. Linger, and H. Lipson, "Survivable network systems: An emerging discipline," Tech. Rep. Softw. Eng. Inst., Carnegie Mellon Univ., London, U.K., 1997.
11. H. Frank, "Survivability analysis of command and control communications networks - Part II," IEEE Trans. Commun., vol. COM-22, no. 5, pp. 596-605, Jan. 1974.
12. A. T1A1.2, "Technical report on enhanced network survivability performance" Working Group on Network Survivability Performance, Washington, DC, USA, Tech. Rep. 68, 2001.
13. V. Westmark, "A definition for information system survivability," in Proc. 37th Annu. Hawaii Int. Conf. Syst. Sci., Jan. 2004, vol. 9, p. 10.
14. S. Moitra and S. Konda, "A simulation model for managing survivability of networked information systems," Softw. Eng. Inst., Carnegie Mellon Univ., London, U.K., Tech. Rep. CMU/SEI-2000-TR-020, 2000.
15. S. Jha and J. Wing, "Survivability analysis of networked systems," in Proc. 23rd Int. Conf. Software Eng., Jan. 2001, vol. 1, pp. 307-317. (Pubitemid 32485661)
16. Y. Liu and K. Trivedi, "Survivability quantification: The analytical modeling approach," Int. J. Perform. Eng., vol. 2, no. 1, pp. 29-44, Jan. 2006.
17. P. E. Heegaard and K. S. Trivedi, "Network survivability modeling," Comput. Netw., vol. 53, no. 8, pp. 1215-1234, Jun. 2009.
18. S. Gokhale, "Survivability evaluation and modelling," in Advanced Parallel And Distributed Computing: Evaluation, Improvement And Practice, Y. Dai, Y. Pan, and R. Raje, Eds. New York, USA: Nova Science, 2006, vol. 2, ch. 6, pp. 75-97.
19. W. Molisz, "Survivability function-A measure of disaster-based routing performance," IEEE J. Sel. Areas Commun., vol. 22, no. 9, pp. 1876-1883, 2004.
20. D. Nicol, W. Sanders, and K. Trivedi, "Model-based evaluation: From dependability to security," IEEE Trans. Depend. Secure Comput., vol. 1, no. 1, pp. 48-65, Jan. 2004.
21. A. Avizienis, J. Laprie, B. Randell, and C. Landwehr, "Basic concepts and taxonomy of dependable and secure computing," IEEE Trans. Depend. Secure Comput., vol. 1, no. 1, pp. 11-33, Jan. 2004. (Pubitemid 40134576)
22. M. Al-Kuwaiti, N. Kyriakopoulos, and S. Hussein, "A comparative analysis of network dependability, fault-tolerance, reliability, security, and survivability," IEEE Commun. Surveys Tutorials, vol. 11, no. 2, pp. 106-124, 2009.
23. J. Weiss, Protecting Industrial Control Systems from Electronic Threats, 1st ed. New York, USA: Momentum, 2010.
24. F. Jammes and H. Smit, "Service-oriented paradigms in industrial automation," IEEE Trans. Ind. Inf., vol. 1, no. 1, pp. 62-70, Feb. 2005. (Pubitemid 40541397)
25. R. Linger and A. Moore, "Foundations for survivable system development: service traces, intrusion traces, and evaluationmodels," Software Eng. Inst., Hanscom, MA, USA, Tech. Rep. CMU/SEI-2001-TR-029, 2001.
26. J. Hu, I. Khalil, S. Han, and A.Mahmood, "Seamless integration of dependability and security concepts in SOA: A feedback control system based framework and taxonomy," J. Netw. Comput. Appl., vol. 34, no. 4, pp. 1150-1159, Jul. 2011.
27. A. Zolfaghari and F. Kaudel, "Framework for network survivability performance," IEEE J. Sel. Areas in Commun., vol. 12, no. 1, pp. 46-51, Jan. 1994.
28. D. Koller and N. Friedman, Probabilistic GraphicalModels Principles and Techniques. Cambridge, MA, USA: MIT Press, 2009.
29. R. Krutz, Securing SCADA Systems. Indianapolis, IN, USA: Wiley, 2006.
30. E. H. Simpson, "Measurement of diversity," Nature, vol. 163, no. 4148, pp. 688-688, Apr. 1949.
31. V. Chandola, A. Banerjee, and V. Kumar, "Anomaly detection," ACM Comput. Surveys, vol. 41, no. 3, pp. 1-58, Jul. 2009.
32. M. Hawkins, Identification of Outliers. London, U.K.: Chapman, Hall, 1980.
33. D. J. Spiegelhalter and S. L. Lauritzen, "Sequential updating of conditional probabilities on directed graphical structures," Networks, vol. 20, no. 5, pp. 579-605, Aug. 1990.
34. A. Malinowski and H. Yu, "Comparison of embedded system design for industrial applications," IEEE Trans. Ind. Inf., vol. 7, no. 2, pp. 244-254, May 2011.
35. C. Queiroz, A. Mahmood, and Z. Tari, "SCADASim - A framework for building SCADA simulations," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 589-597, Dec. 2011.
36. M. Kafai and B. Bhanu, "Dynamic Bayesian networks for vehicle classification in video," IEEE Trans. Ind. Inf., vol. 8, no. 1, pp. 100-109, Feb. 2012.