Assessing and managing the information and communication risk of power generation. (October 2015)

• Record Type: Journal Article
• Authors: Baiardi, F.; Tonelli, F.; Guidi, L.; Pestonesi, D.; Angeletti, V.
• Is Part Of: Computers & electrical engineering. Volume 47(2015)
• Page Start: 286
• Page End: 298
• Publication Date: 2015-10
• Subjects: Risk assessment -- Metric -- Intelligent agent -- Model based assessment -- Monte Carlo method -- Industrial control system; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2015.07.005
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: We describe a model-based assessment of information and communication technology (ICT) risk that produces statistical samples by simulating the attacks of intelligent agents. To support this assessment, we have developed an integrated set of tools, the Haruspex suite. Some of its tools build the models of the target system and those of the agents that other tools apply to simulate the agent attacks. Further tools analyze the output of the simulation. After outlining the proposed approach and the suite, we describe the assessments of two industrial control systems that supervise, respectively, a thermoelectric generation plan and a hydroelectric one. To simplify the presentation of the output of these assessments, we introduce the security stress, a synthetic measure of how a system resists to attacks.