IIoT-ARAS: IIoT/ICS Automated Risk Assessment System for Prediction and Prevention
IIoT-ARAS: IIoT/ICS Automated Risk Assessment System for Prediction and Prevention
复制标题
IIoT-ARAS：用于预测和预防的 IIoT/ICS 自动风险评估系统
DOI：
10.1145/3422337.3450320
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Ali-Gombe, Aisha
中科院分区：
文献类型：
--
作者：
Zahran, Bassam;Hussaini, Adamu;Ali-Gombe, Aisha
随着IT/OT融合的不断发展，传统上孤立的ICS/OT系统越来越多地暴露于无数的在线和离线威胁。尽管IIoT增强了ICS的可达性，改进了数据分析，确保了访问和决策的便利性，但它无意中向攻击者开放了ICS环境。工业物联网的设计为一个隔离系统引入了多个入口点，用于通过气隙和风险规避策略来保护自己。本研究探讨了IT/OT融合的威胁和风险的全面映射。此外，我们还提出了IIoT-ARAS -一种基于OCTAVE Allegro和ISO/IEC 27030方法的自动化风险评估系统。IIoT-ARAS的设计目标是无代理，对OT环境的干扰最小。此外，该系统执行自动定期资产库存检查、阈值优化、概率计算、风险评估和应急计划配置。
As IT/OT convergence continues to evolve, the traditionally isolated ICS/OT systems are increasingly exposed to a myriad of online and offline threats. Although IIoT enhances the reachability in ICS, improved data analytics, ensuring ease of access and decision making, it unwittingly opens the ICS environment to attackers. The design of IIoT introduces multiple entry points to an isolated system, which is used to protect itself via air-gapping and risk avoidance strategies. This study explores a comprehensive mapping of threats and risks for IT/OT convergence. Additionally, we propose IIoT-ARAS - an automated risk assessment system based on OCTAVE Allegro and ISO/IEC 27030 methodologies. The design of IIoT-ARAS is aimed to be agentless, with minimum interruptions to the OT environment. Furthermore, the system performs automated regular asset inventory checks, threshold optimization, probability computation, risk evaluations, and contingency plan configuration.