Investigating Stochastic Dependencies Between Critical Infrastructures

Critical infrastructures (CIs) are essential for the welfare and prosperity of a society, and failure of one infrastructure has a significant impact on our everyday life. However, a problem in one critical infrastructure is rarely local but often affects other infrastructures, e.g., limited availability of electricity affects hospitals, water providers and food suppliers. Even a partial failure of critical infrastructures has consequences that are hard to predict unless under stringent assumptions. Among other things, the damage on another infrastructure depends on the availability of substitutes. While such factors are mostly known, many external factors such as weather, temporary demand or load peaks are not precisely predictable so that a stochastic model is required to describe the state of an infrastructure. The state of each infrastructure is described by a random variable and changes its state according to a transition regime that depends on the state of other CIs but also the type of dependency. This yields a model of complex interdependencies with unknown dynamics where the state of a CI is determined by several Markov chains. Several ways exist to determine the actual state of the CI under several influences; the most conservative one is to assume the worst case (by applying the maximum principle). In this work, we provide a more general view that allows incorporating dependencies between input providers. Further, we discuss practical issues such as assessments from several experts and investigate chances for healing and total failure. An implementation of the model in R is used to illustrate how the model may be used in practice to estimate the states of a dependent CI due to limited availability of a provider. This paper describes a stochastic model of dependencies between CIs and discusses issues that arise when applying it. Keywords-critical infrastructure; stochastic dependencies; Markov chain; risk propagation; copula.

[1]  Stefan Rass,et al.  A Simulation Tool for Cascading Effects in Interdependent Critical Infrastructures , 2018, ARES.

[2]  Lamine Mili,et al.  Power system and communication network co-simulation for smart grid applications , 2011, ISGT 2011.

[3]  Anna Scaglione,et al.  A Markov-Transition Model for Cascading Failures in Power Grids , 2012, 2012 45th Hawaii International Conference on System Sciences.

[4]  Moody T. Chu,et al.  Markov chains with memory, tensor formulation, and the dynamics of power iteration , 2017, Appl. Math. Comput..

[5]  Anas Abou El Kalam,et al.  Critical Infrastructures Security Modeling, Enforcement and Runtime Checking , 2009, CRITIS.

[6]  Stefan Rass,et al.  Game Theory for Security and Risk Management: From Theory to Practice , 2018 .

[7]  Paul Smith,et al.  Towards secure and resilient networked power distribution grids: Process and tool adoption , 2016, 2016 IEEE International Conference on Smart Grid Communications (SmartGridComm).

[8]  Erica Wiseman,et al.  Critical Infrastructure Protection and Resilience Literature Survey: Modeling and Simulation , 2014 .

[9]  Sandra König,et al.  Assessing the Impact of Malware Attacks in Utility Networks , 2018 .

[10]  Friederich Kupzog,et al.  Rapid control prototyping platform for networked smart grid systems , 2013, IECON 2013 - 39th Annual Conference of the IEEE Industrial Electronics Society.

[11]  Yun Liu,et al.  Using agent-based simulation to analyse the effect of broadcast and narrowcast on public perception: A case in social risk amplification , 2014, Proceedings of the Winter Simulation Conference 2014.

[12]  Joost R. Santos,et al.  Modeling the Demand Reduction Input‐Output (I‐O) Inoperability Due to Terrorism of Interconnected Infrastructures * , 2004, Risk analysis : an official publication of the Society for Risk Analysis.

[13]  Barry E. Mullins,et al.  Design and Implementation of Industrial Control System Emulators , 2013, Critical Infrastructure Protection.

[14]  Pascal Bouvry,et al.  Dependency Analysis for Critical Infrastructure Security Modelling: A Case Study within the Grid'5000 Project , 2013, CD-ARES Workshops.

[15]  Panayiotis Kotzanikolaou,et al.  Assessing n-order dependencies between critical infrastructures , 2013, Int. J. Crit. Infrastructures.

[16]  Vittorio Rosato,et al.  Managing the Complexity of Critical Infrastructures: A Modelling and Simulation Approach , 2017 .

[17]  James P. Peerenboom,et al.  Identifying, understanding, and analyzing critical infrastructure interdependencies , 2001 .

[18]  Stefan Schauer,et al.  A Risk Management Approach for Highly Interconnected Networks , 2018 .

[19]  Matthew Henry,et al.  Risk Analysis in Interdependent Infrastructures , 2007, Critical Infrastructure Protection.

[20]  Panayiotis Kotzanikolaou,et al.  Risk assessment methodology for interdependent critical infrastructures , 2011 .

[21]  Yacov Y. Haimes,et al.  Hierarchical Holographic Modeling , 1981, IEEE Transactions on Systems, Man, and Cybernetics.

[22]  T. Gordon,et al.  Initial experiments with the cross impact matrix method of forecasting , 1968 .

[23]  Murray Turoff,et al.  Scenario construction via Delphi and cross-impact analysis , 2011 .

[24]  Eric A. M. Luiijf,et al.  Assessing and improving SCADA security in the Dutch drinking water sector , 2009, Int. J. Crit. Infrastructure Prot..

[25]  Y. Haimes,et al.  Leontief-Based Model of Risk in Complex Interconnected Infrastructures , 2001 .

[26]  Nouredine Hadjsaid,et al.  Vulnerability analysis of coupled heterogeneous critical infrastructures: A Co-simulation approach with a testbed validation , 2013, IEEE PES ISGT Europe 2013.

[27]  Bill Ravens,et al.  An Introduction to Copulas , 2000, Technometrics.

[28]  Erich Rome,et al.  Information Modelling and Simulation in Large Interdependent Critical Infrastructures in IRRIIS , 2009, CRITIS.

[29]  S.D. Wolthusen,et al.  Analysis and Statistical Properties of Critical Infrastructure Interdependency Multiflow Models , 2007, 2007 IEEE SMC Information Assurance and Security Workshop.

[30]  Murray Turoff,et al.  An alternative approach to cross impact analysis , 1971 .

[31]  Steven M. Rinaldi,et al.  Modeling and simulating critical infrastructures and their interdependencies , 2004, 37th Annual Hawaii International Conference on System Sciences, 2004. Proceedings of the.

[32]  Majeed M. Hayat,et al.  Cascading Failures in Interdependent Infrastructures: An Interdependent Markov-Chain Approach , 2016, IEEE Transactions on Smart Grid.

[33]  Roberto Setola,et al.  Critical infrastructure dependency assessment using the input-output inoperability model , 2009, Int. J. Crit. Infrastructure Prot..

[34]  Stefan Rass,et al.  Practical Risk Analysis in Interdependent Critical Infrastructures - a How-To , 2018 .

[35]  Ian Dobson,et al.  Interdependent Risk in Interacting Infrastructure Systems , 2007, 2007 40th Annual Hawaii International Conference on System Sciences (HICSS'07).

[36]  Stefan Rass,et al.  Stochastic Dependencies Between Critical Infrastructures , 2017, International Conference on Emerging Security Information, Systems and Technologies.