Mission-Aware Vulnerability Assessment for Cyber-Physical Systems
Mission-Aware Vulnerability Assessment for Cyber-Physical Systems
复制标题
网络物理系统的任务感知漏洞评估
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
V. Saunders
中科院分区：
文献类型：
--
作者：
Xiaotian Wang;M. Davis;Junjie Zhang;V. Saunders
Designing secure cyber-physical systems (CPS) is fundamentally important and performing vulnerability assessment becomes indispensable. In this paper, we discuss our ongoing work on building an automated mission-aware vulnerability CPS assessment framework that can accomplish three objectives including i) mapping CPS missions into infrastructural components, ii) evaluating global impact of each vulnerability, and iii) achieving verifiable results and high flexibility. In order to accomplish these objectives, we follow a model-assisted analysis strategy. Specifically, we take advantage of CPS simulator to model the behaviors of CPS components under different missions, our framework facilitates a bottom-up approach to construct a holistic model of a CPS that aim at profiling relationships among all CPS components. Formal methods, including program symbolic execution, logic programming, and linear optimization, have been employed to analyze the model, which build mathematical rigor into our framework. The framework first identifies mission-critical components, then discovers all attack paths from system access points to mission-critical components, and finally recommends the optimized mitigation plan.
