Paper Info
Title
Exploiting Submodularity in Security Measure Allocation for Industrial Control Systems.
Abstract
Industrial control systems are cyber-physical systems that are used to operate critical infrastructures such as smart grids, traffic systems, industrial facilities, and water distribution networks. The digitalization of these systems increases their efficiency and decreases their cost of operation, but also makes them more vulnerable to cyber-attacks. In order to protect industrial control systems from cyber-attacks, the installation of multiple layers of security measures is necessary. In this paper, we study how to allocate a large number of security measures under a limited budget, such as to minimize the total risk of cyber-attacks. The security measure allocation problem formulated in this way is a combinatorial optimization problem subject to a knapsack (budget) constraint. The formulated problem is NP-hard, therefore we propose a method to exploit submodularity of the objective function so that polynomial time algorithms can be applied to obtain solutions with guaranteed approximation bounds. The problem formulation requires a preprocessing step in which attack scenarios are selected, and impacts and likelihoods of these scenarios are estimated. We discuss how the proposed method can be applied in practice.
Year
DOI
Venue
2017
10.1145/3137003.3137011
SenSys '17: The 15th ACM Conference on Embedded Network Sensor Systems Delft Netherlands November, 2017
Field
DocType
ISBN
Cost of operation,Mathematical optimization,Smart grid,Computer science,Exploit,Industrial control system,Preprocessor,Knapsack problem,Control system,Time complexity
Conference
978-1-4503-5545-2
Citations 
PageRank 
References 
0
0.34
10
Authors
4
Name
Order
Citations
PageRank
Jezdimir Milosevic101.01
Takashi Tanaka23412.22
Henrik Sandberg31215112.50
K. H. Johansson436139.07