2019/04/02 by Uchenna Ani, Jeremy D McK. Watson, Ani, Uchenna D +7
Computer Science · Engineering · #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #FOS: Electrical engineering #Information and Cyber Security #Infrastructure Resilience and Vulnerability Analysis #Networking and Internet Architecture (cs.NI) #Smart Grid Security and Resilience #Systems and Control (eess.SY) #electronic engineering #information engineering
paper · pdf · doi:10.48550/arxiv.1904.01551
openalex publication_date 2019/04/02 · openalex created_date 2022/07/29 · openalex updated_date 2026/07/28
As new technologies such as the Internet of Things (IoT) are integrated into\nCritical National Infrastructures (CNI), new cybersecurity threats emerge that\nrequire specific security solutions. Approaches used for analysis include the\nmodelling and simulation of critical infrastructure systems using attributes,\nfunctionalities, operations, and behaviours to support various security\nanalysis viewpoints, recognising and appropriately managing associated security\nrisks. With several critical infrastructure protection approaches available,\nthe question of how to effectively model the complex behaviour of\ninterconnected CNI elements and to configure their protection as a\nsystem-of-systems remains a challenge. Using a systematic review approach,\nexisting critical infrastructure protection approaches (tools and techniques)\nare examined to determine their suitability given trends like IoT, and\neffective security modelling and analysis issues. It is found that\nempirical-based, agent-based, system dynamics-based, and network-based\nmodelling are more commonly applied than economic-based and equation-based\ntechniques, and empirical-based modelling is the most widely used. The energy\nand transportation critical infrastructure sectors reflect the most responsive\nsectors, and no one Critical Infrastructure Protection (CIP) approach - tool,\ntechnique, methodology or framework -- provides a fit-for-all capacity for\nall-round attribute modelling and simulation of security risks. Typically,\ndeciding factors for CIP choices to adopt are often dominated by trade-offs\nbetween complexity of use and popularity of approach, as well as between\nspecificity and generality of application in sectors.\n