Assessing the Impact of Cyber Attacks on Wireless Sensor Nodes That Monitor Interdependent Physical Systems

Valerio Formicola (1) , Antonio Di Pietro (2) , Abdullah Alsubaie (3, 4) , Salvatore D’antonio (1) , Jose Marti (3)

1 PARTHENOPE - Università degli Studi di Napoli “Parthenope” = University of Naples
2 ENEA - Italian National agency for new technologies, Energy and sustainable economic development [Frascati]
3 UBC - University of British Columbia
4 KACST - King Abdulaziz City for Science and Technology [Riyadh]

This paper describes a next-generation security information and event management (SIEM) platform that performs real-time impact assessment of cyber attacks that target monitoring and control systems in interdependent critical infrastructures. To assess the effects of cyber attacks on the services provided by critical infrastructures, the platform combines security analysis with simulations produced by the Infrastructure Interdependencies Simulator (i2Sim). The approach is based on the mixed holistic reductionist (MHR) methodology that models the relationships between functional components of critical infrastructures and the provided services. The effectiveness of the approach is demonstrated using a scenario involving a dam that feeds a hydroelectric power plant. The scenario considers an attack on a legacy SCADA system and wireless sensor network that reduces electricity production and degrades the services provided by the interdependent systems. The results demonstrate that the attack is detected in a timely manner, risk assessment is performed effectively and service level variations can be predicted. The paper also shows how the impact of attacks on services can be estimated when limits are imposed on information sharing.

Mots clés: Cyber attacks; wireless sensor networks; attack impact

Domaines: Informatique [cs]

Valerio Formicola, Antonio Di Pietro, Abdullah Alsubaie, Salvatore D’antonio, Jose Marti. Assessing the Impact of Cyber Attacks on Wireless Sensor Nodes That Monitor Interdependent Physical Systems. 8th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2014, Arlington, United States. pp.213-229, ⟨10.1007/978-3-662-45355-1_14⟩. ⟨hal-01386766⟩