A case study assessing the effects of cyber attacks on a river zonal dispatcher

Ronald Joseph Wright, Ken Keefe, Brett Feddersen, William H. Sanders

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the Möbius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.

Original languageEnglish (US)
Title of host publicationCritical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers
EditorsRoberto Setola, Stephen Wolthusen, Hypatia Nassopoulos, Grigore Havarneanu, Stephen Wolthusen
PublisherSpringer-Verlag
Pages252-264
Number of pages13
ISBN (Print)9783319713670
DOIs
StatePublished - Jan 1 2017
Event11th International Conference on Critical Information Infrastructures Security, CRITIS 2016 - Paris, France
Duration: Oct 10 2016Oct 12 2016

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume10242 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Other

Other11th International Conference on Critical Information Infrastructures Security, CRITIS 2016
CountryFrance
CityParis
Period10/10/1610/12/16

Fingerprint

Rivers
Attack
Intrusion detection
Security systems
Catchments
Quantitative Evaluation
Flooding
Intrusion Detection
Modeling
Path
Alternatives

Keywords

  • Control systems security
  • Discrete event simulation
  • Quantitative security metrics
  • State-based security model

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)

Cite this

Wright, R. J., Keefe, K., Feddersen, B., & Sanders, W. H. (2017). A case study assessing the effects of cyber attacks on a river zonal dispatcher. In R. Setola, S. Wolthusen, H. Nassopoulos, G. Havarneanu, & S. Wolthusen (Eds.), Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers (pp. 252-264). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 10242 LNCS). Springer-Verlag. https://doi.org/10.1007/978-3-319-71368-7_21

A case study assessing the effects of cyber attacks on a river zonal dispatcher. / Wright, Ronald Joseph; Keefe, Ken; Feddersen, Brett; Sanders, William H.

Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. ed. / Roberto Setola; Stephen Wolthusen; Hypatia Nassopoulos; Grigore Havarneanu; Stephen Wolthusen. Springer-Verlag, 2017. p. 252-264 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 10242 LNCS).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Wright, RJ, Keefe, K, Feddersen, B & Sanders, WH 2017, A case study assessing the effects of cyber attacks on a river zonal dispatcher. in R Setola, S Wolthusen, H Nassopoulos, G Havarneanu & S Wolthusen (eds), Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 10242 LNCS, Springer-Verlag, pp. 252-264, 11th International Conference on Critical Information Infrastructures Security, CRITIS 2016, Paris, France, 10/10/16. https://doi.org/10.1007/978-3-319-71368-7_21
Wright RJ, Keefe K, Feddersen B, Sanders WH. A case study assessing the effects of cyber attacks on a river zonal dispatcher. In Setola R, Wolthusen S, Nassopoulos H, Havarneanu G, Wolthusen S, editors, Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. Springer-Verlag. 2017. p. 252-264. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). https://doi.org/10.1007/978-3-319-71368-7_21
Wright, Ronald Joseph ; Keefe, Ken ; Feddersen, Brett ; Sanders, William H. / A case study assessing the effects of cyber attacks on a river zonal dispatcher. Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. editor / Roberto Setola ; Stephen Wolthusen ; Hypatia Nassopoulos ; Grigore Havarneanu ; Stephen Wolthusen. Springer-Verlag, 2017. pp. 252-264 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
@inproceedings{d220ffa0509844919ce23d31faacaa5b,
title = "A case study assessing the effects of cyber attacks on a river zonal dispatcher",
abstract = "A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the M{\"o}bius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.",
keywords = "Control systems security, Discrete event simulation, Quantitative security metrics, State-based security model",
author = "Wright, {Ronald Joseph} and Ken Keefe and Brett Feddersen and Sanders, {William H.}",
year = "2017",
month = "1",
day = "1",
doi = "10.1007/978-3-319-71368-7_21",
language = "English (US)",
isbn = "9783319713670",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer-Verlag",
pages = "252--264",
editor = "Roberto Setola and Stephen Wolthusen and Hypatia Nassopoulos and Grigore Havarneanu and Stephen Wolthusen",
booktitle = "Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers",

}

TY - GEN

T1 - A case study assessing the effects of cyber attacks on a river zonal dispatcher

AU - Wright, Ronald Joseph

AU - Keefe, Ken

AU - Feddersen, Brett

AU - Sanders, William H.

PY - 2017/1/1

Y1 - 2017/1/1

N2 - A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the Möbius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.

AB - A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the Möbius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.

KW - Control systems security

KW - Discrete event simulation

KW - Quantitative security metrics

KW - State-based security model

UR - http://www.scopus.com/inward/record.url?scp=85036626509&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85036626509&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-71368-7_21

DO - 10.1007/978-3-319-71368-7_21

M3 - Conference contribution

AN - SCOPUS:85036626509

SN - 9783319713670

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 252

EP - 264

BT - Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers

A2 - Setola, Roberto

A2 - Wolthusen, Stephen

A2 - Nassopoulos, Hypatia

A2 - Havarneanu, Grigore

A2 - Wolthusen, Stephen

PB - Springer-Verlag

ER -