Petri-net based attack time analysis in the context of chemical process security

Abstract Chemical production- or storage facilities may have a strong appeal to terrorists due to their potential for causing great losses and possible huge societal impact. In view of the deficiency of attack trees, especially the impact of attacker numbers on the attack time, a timed colored Petri-net based attack process modeling approach, as well as a simulation based security failure probability analysis approach for security management, is proposed in this paper. The number of attackers has a key influence on the logic relationship of attack events. For performing the events represented by the logical gates (mainly AND gate and OR gate) of an attack tree, the influence of a different number of attackers on the attack time is discussed, and corresponding timed colored Petri-net based modeling approaches are provided. Comparing the duration of an attack process with an assumed interval of security inspection, a security failure probability can be obtained.

[1]  Y. F. Khalil,et al.  A novel probabilistically timed dynamic model for physical security attack scenarios on critical infrastructures , 2016 .

[2]  Wout Dullaert,et al.  Managing domino effect-related security of industrial areas , 2008 .

[3]  Stefano Marrone,et al.  Petri Net Modelling of Physical Vulnerability , 2011, CRITIS.

[4]  Stephen D. Wolthusen,et al.  Modeling and execution of complex attack scenarios using interval timed colored Petri nets , 2006, Fourth IEEE International Workshop on Information Assurance (IWIA'06).

[5]  Jai P. Gupta,et al.  Site Security: for Chemical Process Industries , 2011 .

[6]  David A. Moore.  Security Risk Assessment Methodology for the petroleum and petrochemical industries , 2013 .

[7]  Genserik Reniers,et al.  Preparing for major terrorist attacks against chemical clusters: Intelligently planning protection measures w.r.t. domino effects , 2014 .

[8]  Valerio Cozzani,et al.  Security vulnerability assessment of gas pipelines using Discrete-time Bayesian network , 2017 .

[9]  Valerio Cozzani,et al.  Analysis of physical and cyber security-related events in the chemical and process industry , 2018 .

[10]  Genserik Reniers,et al.  Petri-net based modeling and queuing analysis for resource-oriented cooperation of emergency response actions , 2016 .

[11]  Gabriele Landucci,et al.  Assessment of attack likelihood to support security risk assessment studies for chemical facilities , 2017 .

[12]  Bin Chen,et al.  Integrating the API SRA methodology and game theory for improving chemical plant protection , 2018 .

[13]  Hyo-Won Suh,et al.  A timed colored Petri nets modeling for dynamic workflow in product development process , 2008, Comput. Ind..

[14]  J. P. Gupta,et al.  Securing oil and gas infrastructure , 2007 .

[15]  Valerio Cozzani,et al.  The assessment of the attractiveness of process facilities to terrorist attacks , 2015 .

[16]  Tadao Murata,et al.  Petri nets: Properties, analysis and applications , 1989, Proc. IEEE.

[17]  K. Ghosh,et al.  Timed Petri net: An expeditious tool for modelling and analysis of manufacturing systems , 1993 .

[18]  R.F. Mills,et al.  Analyzing Attack Trees using Generalized Stochastic Petri Nets , 2006, 2006 IEEE Information Assurance Workshop.

[19]  Genserik Reniers,et al.  Petri-net based simulation analysis for emergency response to multiple simultaneous large-scale fires , 2016 .

[20]  Gregory Levitin,et al.  Optimal resource distribution between protection and redundancy considering the time and uncertainties of attacks , 2015, Eur. J. Oper. Res..

[21]  Oguzhan Alagöz,et al.  Modeling secrecy and deception in a multiple-period attacker-defender signaling game , 2010, Eur. J. Oper. Res..

[22]  Valerio Cozzani,et al.  Development of an economic model for the allocation of preventive security measures against environmental and ecological terrorism in chemical facilities , 2017 .

[23]  Genserik Reniers,et al.  A Game-Theoretical Model to Improve Process Plant Protection from Terrorist Attacks. , 2016, Risk analysis : an official publication of the Society for Risk Analysis.

[24]  Helen H. Lou,et al.  Large-scale dynamic simulation for security assessment of an ethylene oxide manufacturing process , 2006, Comput. Chem. Eng..

[25]  Wlodzimierz M. Zuberek,et al.  Timed Petri nets definitions, properties, and applications , 1991 .

[26]  Bin Liu,et al.  A hazard analysis via an improved timed colored petri net with time-space coupling safety constraint , 2016 .