A case study assessing the effects of cyber attacks on a river zonal dispatcher

Ronald Joseph Wright; Ken Keefe; Brett Feddersen; William H. Sanders

doi:10.1007/978-3-319-71368-7_21

A case study assessing the effects of cyber attacks on a river zonal dispatcher

Ronald Joseph Wright, Ken Keefe, Brett Feddersen, William H. Sanders

Electrical and Computer Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the Möbius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.

Original language	English (US)
Title of host publication	Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers
Editors	Roberto Setola, Stephen Wolthusen, Hypatia Nassopoulos, Grigore Havarneanu, Stephen Wolthusen
Publisher	Springer
Pages	252-264
Number of pages	13
ISBN (Print)	9783319713670
DOIs	https://doi.org/10.1007/978-3-319-71368-7_21
State	Published - 2017
Event	11th International Conference on Critical Information Infrastructures Security, CRITIS 2016 - Paris, France Duration: Oct 10 2016 → Oct 12 2016

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	10242 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Other

Other	11th International Conference on Critical Information Infrastructures Security, CRITIS 2016
Country/Territory	France
City	Paris
Period	10/10/16 → 10/12/16

Keywords

Control systems security
Discrete event simulation
Quantitative security metrics
State-based security model

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Online availability

10.1007/978-3-319-71368-7_21

Library availability

Discover UIUC Full Text

Cite this

Wright, R. J., Keefe, K., Feddersen, B., & Sanders, W. H. (2017). A case study assessing the effects of cyber attacks on a river zonal dispatcher. In R. Setola, S. Wolthusen, H. Nassopoulos, G. Havarneanu, & S. Wolthusen (Eds.), Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers (pp. 252-264). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 10242 LNCS). Springer. https://doi.org/10.1007/978-3-319-71368-7_21

A case study assessing the effects of cyber attacks on a river zonal dispatcher. / Wright, Ronald Joseph; Keefe, Ken; Feddersen, Brett et al.
Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. ed. / Roberto Setola; Stephen Wolthusen; Hypatia Nassopoulos; Grigore Havarneanu; Stephen Wolthusen. Springer, 2017. p. 252-264 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 10242 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Wright, RJ, Keefe, K, Feddersen, B & Sanders, WH 2017, A case study assessing the effects of cyber attacks on a river zonal dispatcher. in R Setola, S Wolthusen, H Nassopoulos, G Havarneanu & S Wolthusen (eds), Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 10242 LNCS, Springer, pp. 252-264, 11th International Conference on Critical Information Infrastructures Security, CRITIS 2016, Paris, France, 10/10/16. https://doi.org/10.1007/978-3-319-71368-7_21

Wright RJ, Keefe K, Feddersen B, Sanders WH. A case study assessing the effects of cyber attacks on a river zonal dispatcher. In Setola R, Wolthusen S, Nassopoulos H, Havarneanu G, Wolthusen S, editors, Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. Springer. 2017. p. 252-264. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-319-71368-7_21

Wright, Ronald Joseph ; Keefe, Ken ; Feddersen, Brett et al. / A case study assessing the effects of cyber attacks on a river zonal dispatcher. Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers. editor / Roberto Setola ; Stephen Wolthusen ; Hypatia Nassopoulos ; Grigore Havarneanu ; Stephen Wolthusen. Springer, 2017. pp. 252-264 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{d220ffa0509844919ce23d31faacaa5b,

title = "A case study assessing the effects of cyber attacks on a river zonal dispatcher",

abstract = "A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the M{\"o}bius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.",

keywords = "Control systems security, Discrete event simulation, Quantitative security metrics, State-based security model",

author = "Wright, {Ronald Joseph} and Ken Keefe and Brett Feddersen and Sanders, {William H.}",

note = "Publisher Copyright: {\textcopyright} 2017, Springer International Publishing AG.; 11th International Conference on Critical Information Infrastructures Security, CRITIS 2016 ; Conference date: 10-10-2016 Through 12-10-2016",

year = "2017",

doi = "10.1007/978-3-319-71368-7_21",

language = "English (US)",

isbn = "9783319713670",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "252--264",

editor = "Roberto Setola and Stephen Wolthusen and Hypatia Nassopoulos and Grigore Havarneanu and Stephen Wolthusen",

booktitle = "Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers",

address = "Germany",

}

TY - GEN

T1 - A case study assessing the effects of cyber attacks on a river zonal dispatcher

AU - Wright, Ronald Joseph

AU - Keefe, Ken

AU - Feddersen, Brett

AU - Sanders, William H.

PY - 2017

Y1 - 2017

N2 - A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the Möbius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.

AB - A river zonal dispatcher is a system that sends collected environmental data to a national dispatcher and sends warnings in case of danger (such as flooding of river basins). If the system fails to function normally, warnings may cease, putting lives and property in serious peril. We have examined the security of a river zonal dispatcher using the ADVISE modeling formalism in the Möbius modeling tool. This work both illustrates the usefulness of ADVISE in choosing among alternative approaches to system security and provides a quantitative evaluation of the dispatcher itself. In doing so, it shows whether intrusion detection systems (IDSes) make a difference in the behavior of an adversary, and which path of attack is most attractive to particular types of adversaries.

KW - Control systems security

KW - Discrete event simulation

KW - Quantitative security metrics

KW - State-based security model

UR - http://www.scopus.com/inward/record.url?scp=85036626509&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85036626509&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-71368-7_21

DO - 10.1007/978-3-319-71368-7_21

M3 - Conference contribution

AN - SCOPUS:85036626509

SN - 9783319713670

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 252

EP - 264

BT - Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers

A2 - Setola, Roberto

A2 - Wolthusen, Stephen

A2 - Nassopoulos, Hypatia

A2 - Havarneanu, Grigore

A2 - Wolthusen, Stephen

PB - Springer

T2 - 11th International Conference on Critical Information Infrastructures Security, CRITIS 2016

Y2 - 10 October 2016 through 12 October 2016

ER -

A case study assessing the effects of cyber attacks on a river zonal dispatcher

Abstract

Publication series

Other

Keywords

ASJC Scopus subject areas

Online availability

Library availability

Related links

Fingerprint

Cite this