Defense-in-depth vs. critical component defense for industrial control systems

Fielder, Andrew, Li, Tingting ORCID: https://orcid.org/0000-0002-9448-1655 and Hankin, Chris 2016. Defense-in-depth vs. critical component defense for industrial control systems. Presented at: 4th International Symposium for ICS & SCADA Cyber Security Research 2016 (ICS-CSR 2016), Belfast, Ireland, United Kingdom, 23-25 August 2016. ICS-CSR '16: Proceedings of the 4th International Symposium for ICS & SCADA Cyber Security Research 2016. BCS Learning & Development Ltd., pp. 1-10. 10.14236/ewic/ICS2016.1

PDF - Published Version Available under License Creative Commons Attribution. Download (2MB)

Abstract

Originally designed as self-contained and isolated networks, IndustrialControl Systems (ICS) have evolved to become increasingly interconnected with IT systems and other wider networks and services, which enables cyber attacks to sabotage the normal operation of ICS. This paper proposes a simulation of attackers and defenders, who have limited resources that must be applied to either advancing the technology they have available to them or attempting to attack (defend) the system. The objective is to identify the appropriate deployment of specific defensive strategy, such as Defense-in-depth and Critical Component Defense. The problem is represented as a strategic competitive optimisation problem, which is solved using a coevolutionary Particle Swarm Optimisation problem. Through the development of optimal defense strategies, it is possible to identify when each specific defensive strategies is most appropriate; where the optimal defensive strategy depends on the kind of attacker the system is expecting and the structure of the network.

Item Type:	Conference or Workshop Item (Paper)
Date Type:	Publication
Status:	Published
Schools:	Computer Science & Informatics
Publisher:	BCS Learning & Development Ltd.
ISBN:	9781780173573
Date of First Compliant Deposit:	15 April 2020
Last Modified:	07 Nov 2022 10:03
URI:	https://orca.cardiff.ac.uk/id/eprint/130990

Actions (repository staff only)

Edit Item