Developing models for physical atacks in cyber-physical systems

Carmen Cheh, Ken Keefe, Brett Feddersen, Binbin Chen, William G. Temple, William H. Sanders

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

In this paper, we analyze the security of cyber-physical systems using the ADversary VIew Security Evaluation (ADVISE) meta modeling approach, taking into consideration the efects of physical attacks. To build our model of the system, we construct an ontology that describes the system components and the relationships among them. The ontology also deines attack steps that represent cyber and physical actions that afect the system entities. We apply the ADVISE meta modeling approach, which admits as input our deined ontology, to a railway system use case to obtain insights regarding the system's security. The ADVISE Meta tool takes in a system model of a railway station and generates an attack execution graph that shows the actions that adversaries may take to reach their goal. We consider several adversary proiles, ranging from outsiders to insider staf members, and compare their attack paths in terms of targeted assets, time to achieve the goal, and probability of detection. The generated results show that even adversaries with access to noncritical assets can afect system service by intelligently crafting their attacks to trigger a physical sequence of efects. We also identify the physical devices and user actions that require more in-depth monitoring to reinforce the system's security.

Original languageEnglish (US)
Title of host publicationCPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017
PublisherAssociation for Computing Machinery, Inc
Pages49-55
Number of pages7
ISBN (Electronic)9781450353946
DOIs
StatePublished - Nov 3 2017
Event3rd ACM Workshop on Cyber-Physical Systems Security and PrivaCy, CPS-SPC 2017 - Dallas, United States
Duration: Nov 3 2017 → …

Publication series

NameCPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017

Other

Other3rd ACM Workshop on Cyber-Physical Systems Security and PrivaCy, CPS-SPC 2017
CountryUnited States
CityDallas
Period11/3/17 → …

Fingerprint

Ontology
Security systems
Monitoring
Cyber Physical System

Keywords

  • Attack graph
  • Cyber-physical systems
  • Ontology
  • Physical attack

ASJC Scopus subject areas

  • Computer Science Applications
  • Software
  • Computer Networks and Communications

Cite this

Cheh, C., Keefe, K., Feddersen, B., Chen, B., Temple, W. G., & Sanders, W. H. (2017). Developing models for physical atacks in cyber-physical systems. In CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017 (pp. 49-55). (CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017). Association for Computing Machinery, Inc. https://doi.org/10.1145/3140241.3140249

Developing models for physical atacks in cyber-physical systems. / Cheh, Carmen; Keefe, Ken; Feddersen, Brett; Chen, Binbin; Temple, William G.; Sanders, William H.

CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017. Association for Computing Machinery, Inc, 2017. p. 49-55 (CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Cheh, C, Keefe, K, Feddersen, B, Chen, B, Temple, WG & Sanders, WH 2017, Developing models for physical atacks in cyber-physical systems. in CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017. CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017, Association for Computing Machinery, Inc, pp. 49-55, 3rd ACM Workshop on Cyber-Physical Systems Security and PrivaCy, CPS-SPC 2017, Dallas, United States, 11/3/17. https://doi.org/10.1145/3140241.3140249
Cheh C, Keefe K, Feddersen B, Chen B, Temple WG, Sanders WH. Developing models for physical atacks in cyber-physical systems. In CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017. Association for Computing Machinery, Inc. 2017. p. 49-55. (CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017). https://doi.org/10.1145/3140241.3140249
Cheh, Carmen ; Keefe, Ken ; Feddersen, Brett ; Chen, Binbin ; Temple, William G. ; Sanders, William H. / Developing models for physical atacks in cyber-physical systems. CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017. Association for Computing Machinery, Inc, 2017. pp. 49-55 (CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017).
@inproceedings{3ef684d72cae4d53a58feafa47848aca,
title = "Developing models for physical atacks in cyber-physical systems",
abstract = "In this paper, we analyze the security of cyber-physical systems using the ADversary VIew Security Evaluation (ADVISE) meta modeling approach, taking into consideration the efects of physical attacks. To build our model of the system, we construct an ontology that describes the system components and the relationships among them. The ontology also deines attack steps that represent cyber and physical actions that afect the system entities. We apply the ADVISE meta modeling approach, which admits as input our deined ontology, to a railway system use case to obtain insights regarding the system's security. The ADVISE Meta tool takes in a system model of a railway station and generates an attack execution graph that shows the actions that adversaries may take to reach their goal. We consider several adversary proiles, ranging from outsiders to insider staf members, and compare their attack paths in terms of targeted assets, time to achieve the goal, and probability of detection. The generated results show that even adversaries with access to noncritical assets can afect system service by intelligently crafting their attacks to trigger a physical sequence of efects. We also identify the physical devices and user actions that require more in-depth monitoring to reinforce the system's security.",
keywords = "Attack graph, Cyber-physical systems, Ontology, Physical attack",
author = "Carmen Cheh and Ken Keefe and Brett Feddersen and Binbin Chen and Temple, {William G.} and Sanders, {William H.}",
year = "2017",
month = "11",
day = "3",
doi = "10.1145/3140241.3140249",
language = "English (US)",
series = "CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017",
publisher = "Association for Computing Machinery, Inc",
pages = "49--55",
booktitle = "CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017",

}

TY - GEN

T1 - Developing models for physical atacks in cyber-physical systems

AU - Cheh, Carmen

AU - Keefe, Ken

AU - Feddersen, Brett

AU - Chen, Binbin

AU - Temple, William G.

AU - Sanders, William H.

PY - 2017/11/3

Y1 - 2017/11/3

N2 - In this paper, we analyze the security of cyber-physical systems using the ADversary VIew Security Evaluation (ADVISE) meta modeling approach, taking into consideration the efects of physical attacks. To build our model of the system, we construct an ontology that describes the system components and the relationships among them. The ontology also deines attack steps that represent cyber and physical actions that afect the system entities. We apply the ADVISE meta modeling approach, which admits as input our deined ontology, to a railway system use case to obtain insights regarding the system's security. The ADVISE Meta tool takes in a system model of a railway station and generates an attack execution graph that shows the actions that adversaries may take to reach their goal. We consider several adversary proiles, ranging from outsiders to insider staf members, and compare their attack paths in terms of targeted assets, time to achieve the goal, and probability of detection. The generated results show that even adversaries with access to noncritical assets can afect system service by intelligently crafting their attacks to trigger a physical sequence of efects. We also identify the physical devices and user actions that require more in-depth monitoring to reinforce the system's security.

AB - In this paper, we analyze the security of cyber-physical systems using the ADversary VIew Security Evaluation (ADVISE) meta modeling approach, taking into consideration the efects of physical attacks. To build our model of the system, we construct an ontology that describes the system components and the relationships among them. The ontology also deines attack steps that represent cyber and physical actions that afect the system entities. We apply the ADVISE meta modeling approach, which admits as input our deined ontology, to a railway system use case to obtain insights regarding the system's security. The ADVISE Meta tool takes in a system model of a railway station and generates an attack execution graph that shows the actions that adversaries may take to reach their goal. We consider several adversary proiles, ranging from outsiders to insider staf members, and compare their attack paths in terms of targeted assets, time to achieve the goal, and probability of detection. The generated results show that even adversaries with access to noncritical assets can afect system service by intelligently crafting their attacks to trigger a physical sequence of efects. We also identify the physical devices and user actions that require more in-depth monitoring to reinforce the system's security.

KW - Attack graph

KW - Cyber-physical systems

KW - Ontology

KW - Physical attack

UR - http://www.scopus.com/inward/record.url?scp=85037118051&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85037118051&partnerID=8YFLogxK

U2 - 10.1145/3140241.3140249

DO - 10.1145/3140241.3140249

M3 - Conference contribution

AN - SCOPUS:85037118051

T3 - CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017

SP - 49

EP - 55

BT - CPS-SPC 2017 - Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy, co-located with CCS 2017

PB - Association for Computing Machinery, Inc

ER -