Modelling Cost-Effectiveness of Defenses in Industrial Control Systems
Modelling Cost-Effectiveness of Defenses in Industrial Control Systems
复制标题
工业控制系统中防御的成本效益建模
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
C. Hankin
中科院分区：
文献类型：
--
作者：
A. Fielder;Tingting Li;C. Hankin
工业控制系统在控制工业过程中起着至关重要的作用。现代信息技术的广泛使用使网络攻击能够扰乱ICS的运作。高级持续性威胁(APT)是对ICS最具威胁性的攻击，因为其持续时间长，对ICS具有破坏性的网络物理影响。本文考虑了ICS的攻击者和防御者的模拟，其中防御者必须考虑在系统内实施防御措施的成本效益，以创建最优防御。其目的是确定特定防御战略的适当部署，如纵深防御或关键组成部分防御。该问题被表示为一个战略竞争优化问题，使用协同进化粒子群优化算法进行求解。通过制定最优防御战略，可以确定每种具体防御战略何时最合适；在哪里，最优防御战略取决于可用的资源和这些资源的相对有效性。
Industrial Control Systems (ICS) play a critical role in controlling industrial processes. Wide use of modern IT technologies enables cyber attacks to disrupt the operation of ICS. Advanced Persistent Threats (APT) are the most threatening attacks to ICS due to their long persistence and destructive cyber-physical effects to ICS. This paper considers a simulation of attackers and defenders of an ICS, where the defender must consider the cost-effectiveness of implementing defensive measures within the system in order to create an optimal defense. The aim is to identify the appropriate deployment of a specific defensive strategy, such as defense-in-depth or critical component defense. The problem is represented as a strategic competitive optimisation problem, which is solved using a co-evolutionary particle swarm optimisation algorithm. Through the development of optimal defense strategy, it is possible to identify when each specific defensive strategies is most appropriate; where the optimal defensive strategy depends on the resources available and the relative effectiveness of those resources.