Estimating Cascading Effects in Cyber-Physical Critical Infrastructures

Nowadays, critical infrastructures operate a large number of highly interdependent, cyber-physical systems. Thus, incidents can have far-reaching cascading effects throughout the entire infrastructure, which need to be identified and estimated to realize a proper risk management. In this paper, we present a formal model to describe the propagation of a threat through the various physical and cyber assets within a critical infrastructure and the cascading effects this has on the entire infrastructure. We further show, how this model can be implemented into a prototypical tool, which allows to efficiently simulate the cascading effects of a given incident on the entire network of the infrastructure’s cyber-physical assets. The functionalities of the tool are demonstrated using a small demo set-up of a maritime port infrastructure. In this set-up, four incident scenarios both from the physical and cyber domain are simulated and the results are discussed.

[1]  Stefan Schauer,et al.  Conceptual Framework for Hybrid Situational Awareness in Critical Port Infrastructures , 2018, CRITIS.

[2]  Stefan Rass,et al.  A Stochastic Framework for Prediction of Malware Spreading in Heterogeneous Networks , 2016, NordSec.

[3]  Kevin Jones,et al.  Determining and Sharing Risk Data in Distributed Interdependent Systems , 2017, Computer.

[4]  Marco Aiello,et al.  The Power Grid as a Complex Network: a Survey , 2011, ArXiv.

[5]  Jean-Claude Laprie,et al.  Modelling Interdependencies Between the Electricity and Information Infrastructures , 2007, SAFECOMP.

[6]  Samiul Hasan,et al.  Modeling infrastructure system interdependencies and socioeconomic impacts of failure in extreme events: emerging R&D challenges , 2015, Natural Hazards.

[7]  Kirsi Virrantaus,et al.  Critical infrastructure vulnerability - A method for identifying the infrastructure service failure interdependencies , 2018, Int. J. Crit. Infrastructure Prot..

[8]  Majeed M. Hayat,et al.  Cascading Failures in Interdependent Infrastructures: An Interdependent Markov-Chain Approach , 2016, IEEE Transactions on Smart Grid.

[9]  T. Gordon,et al.  Initial experiments with the cross impact matrix method of forecasting , 1968 .

[10]  Ian Dobson,et al.  Interdependent Risk in Interacting Infrastructure Systems , 2007, 2007 40th Annual Hawaii International Conference on System Sciences (HICSS'07).

[11]  Nasir Ghani,et al.  Stochastic Analysis of Cascading-Failure Dynamics in Power Grids , 2014, IEEE Transactions on Power Systems.

[12]  Sibel McGee,et al.  Implications of cascading effects for the Hyogo Framework , 2016 .

[13]  Stefan Rass,et al.  Hybrid Dependencies Between Cyber and Physical Systems , 2019, Advances in Intelligent Systems and Computing.

[14]  Simin Nadjm-Tehrani,et al.  Quantifying Risks to Data Assets Using Formal Metrics in Embedded System Design , 2015, SAFECOMP.

[15]  Murray Turoff,et al.  Scenario construction via Delphi and cross-impact analysis , 2011 .

[16]  Tyrone Fernando,et al.  A critical review of cascading failure analysis and modeling of power system , 2017 .

[17]  Min Ouyang,et al.  Review on modeling and simulation of interdependent critical infrastructure systems , 2014, Reliab. Eng. Syst. Saf..

[18]  Eric A. M. Luiijf,et al.  Empirical Findings on Critical Infrastructure Dependencies in Europe , 2009, CRITIS.

[19]  Anna Scaglione,et al.  A Markov-Transition Model for Cascading Failures in Power Grids , 2012, 2012 45th Hawaii International Conference on System Sciences.

[20]  Shengwei Mei,et al.  Towards Estimating the Statistics of Simulated Cascades of Outages With Branching Processes , 2013, IEEE Transactions on Power Systems.

[21]  Panayiotis Kotzanikolaou,et al.  Cascading Effects of Common-Cause Failures in Critical Infrastructures , 2013, Critical Infrastructure Protection.

[22]  Wolfgang Kröger,et al.  Performance of Electric Power Systems Under Physical Malicious Attacks , 2013, IEEE Systems Journal.

[23]  Richard G. Little,et al.  Controlling Cascading Failure: Understanding the Vulnerabilities of Interconnected Infrastructures , 2002 .

[24]  Sandra König,et al.  Investigating Stochastic Dependencies Between Critical Infrastructures , 2019 .

[25]  M. Plummer,et al.  CODA: convergence diagnosis and output analysis for MCMC , 2006 .

[26]  Moody T. Chu,et al.  Markov chains with memory, tensor formulation, and the dynamics of power iteration , 2017, Appl. Math. Comput..

[27]  Frances M. T. Brazier,et al.  A robustness metric for cascading failures by targeted attacks in power networks , 2013, 2013 10th IEEE INTERNATIONAL CONFERENCE ON NETWORKING, SENSING AND CONTROL (ICNSC).