Evolution of Safety and Security Risk Assessment methodologies towards the use of Bayesian Networks in Process Industries

Abstract Process Industries handling, producing and storing bulk amount of hazardous materials are a major source of concern in terms of both safety and security. Safety and security cannot be viewed separately as effective implementation of security measures in the facility requires sufficient knowledge of safety concepts as well. Traditionally, risk assessments focused primarily on accidents. The outlook towards security aspects of industries underwent a drastic change after the ‘9/11’ terrorist attack, prompting serious research in security risk assessment methodologies. Conventional quantitative risk assessment techniques are limited due to their static nature and inability to incorporate new information and changing conditions which are characteristic of a dynamic environment. Bayesian Networks are now emerging as an effective tool to perform safety and security risk assessments dynamically by updating the prior failure probability values to accommodate new information. Bayesian networks possess the added advantage of ability to handle multi-state variables and capability to represent the conditional dependence between events. This paper provides a review of evolution of safety risk assessment and security risk assessment methodologies towards Bayesian Networks and its applications in process industries. International journal papers in the related field, published between the period 2000 and 2019 were reviewed and categorized. The intention of this review is to bring out the strengths and weaknesses of Bayesian networks as opposed to traditional and competing methods and to provide directions for future research.

[1]  Hans J. Pasman,et al.  Bayesian networks make LOPA more effective, QRA more transparent and flexible, and thus safety more definable! , 2013 .

[2]  George E Apostolakis,et al.  A Screening Methodology for the Identification and Ranking of Infrastructure Vulnerabilities Due to Terrorism , 2005, Risk analysis : an official publication of the Society for Risk Analysis.

[3]  Davy Janssens,et al.  Integrating Bayesian networks and decision trees in a sequential rule-based transportation model , 2006, Eur. J. Oper. Res..

[4]  Anders L. Madsen,et al.  Assessing ecosystem services from multifunctional trees in pastures using Bayesian belief networks , 2016 .

[5]  V. R. Renjith,et al.  Bayesian estimation and consequence modelling of deliberately induced domino effects in process facilities , 2020 .

[6]  Valerio Cozzani,et al.  Towards dynamic risk analysis: A review of the risk assessment approach and its limitations in the chemical process industry , 2016 .

[7]  Jose Emmanuel Ramirez-Marquez,et al.  An automated method for estimating reliability of grid systems using Bayesian networks , 2012, Reliab. Eng. Syst. Saf..

[8]  Lei Huang,et al.  Bayesian Networks in Fault Diagnosis , 2017, IEEE Transactions on Industrial Informatics.

[9]  Jai P. Gupta,et al.  Terror-Proofing Chemical Process Industries , 2007 .

[10]  Nan Liu,et al.  Risk evaluation approaches in failure mode and effects analysis: A literature review , 2013, Expert Syst. Appl..

[11]  John C. McDonald,et al.  Confronting the risks of terrorism: making the right decisions , 2004, Reliab. Eng. Syst. Saf..

[12]  Ian Jenkinson,et al.  The use of Bayesian network modelling for maintenance planning in a manufacturing industry , 2010, Reliab. Eng. Syst. Saf..

[13]  Enrico Zio,et al.  Cyber attack taxonomy for digital environment in nuclear power plants , 2020, Nuclear Engineering and Technology.

[14]  Faisal Khan,et al.  Methods and models in process safety and risk management: Past, present and future , 2015 .

[15]  Miroslav Sýkora,et al.  Bayesian Network Application for the Risk Assessment of Existing Energy Production Units , 2016, 2016 Second International Symposium on Stochastic Models in Reliability Engineering, Life Science and Operations Management (SMRLO).

[16]  Yu Yang,et al.  Learning Bayesian network parameters from small data sets: A further constrained qualitatively maximum a posteriori method , 2017, Int. J. Approx. Reason..

[17]  Valerio Cozzani,et al.  The assessment of the attractiveness of process facilities to terrorist attacks , 2015 .

[18]  V. R. Renjith,et al.  Application of fuzzy failure mode effect and criticality analysis on unloading facility of LNG terminal , 2019, Journal of Loss Prevention in the Process Industries.

[19]  Gabriele Landucci,et al.  A study on the performance assessment of anti-terrorism physical protection systems in chemical plants , 2017 .

[20]  Mohamed Amine Ferrag,et al.  Deep learning for cyber security intrusion detection: Approaches, datasets, and comparative study , 2020, J. Inf. Secur. Appl..

[21]  Milan Studený,et al.  Characteristic imsets for learning Bayesian network structure , 2012, Int. J. Approx. Reason..

[22]  Jai P. Gupta,et al.  Site Security: for Chemical Process Industries , 2011 .

[23]  Elisabeth Paté-Cornell,et al.  Games and Risk Analysis: Three Examples of Single and Alternate Moves , 2009 .

[24]  Nima Khakzad,et al.  Dynamic safety risk analysis of offshore drilling , 2014 .

[25]  Bin Xu,et al.  Risk analysis for real-time flood control operation of a multi-reservoir system using a dynamic Bayesian network , 2019, Environ. Model. Softw..

[26]  Gyunyoung Heo,et al.  Cyber Security Risk Evaluation of a Nuclear I&C Using BN and ET , 2017 .

[27]  Rasim M. Alguliyev,et al.  Cyber-physical systems and their security issues , 2018, Comput. Ind..

[28]  Brian Veitch,et al.  Assessing offshore emergency evacuation behavior in a virtual environment using a Bayesian Network approach , 2016, Reliab. Eng. Syst. Saf..

[29]  Gabriele Landucci,et al.  Assessment of attack likelihood to support security risk assessment studies for chemical facilities , 2017 .

[30]  Peter Duchessi,et al.  A methodology for developing Bayesian networks: An application to information technology (IT) implementation , 2007, Eur. J. Oper. Res..

[31]  David A. Bell,et al.  Learning Bayesian networks from data: An information-theory based approach , 2002, Artif. Intell..

[32]  Vikram Garaniya,et al.  Risk analysis of deepwater drilling operations using Bayesian network , 2015 .

[33]  Concha Bielza,et al.  Comparison of Bayesian networks and artificial neural networks for quality detection in a machining process , 2009, Expert Syst. Appl..

[34]  Nagaraju Devarakonda,et al.  Intrusion Detection System using Bayesian Network and Hidden Markov Model , 2012 .

[35]  Valerio Cozzani,et al.  Development of an economic model for the allocation of preventive security measures against environmental and ecological terrorism in chemical facilities , 2017 .

[36]  Valerio Cozzani,et al.  Vulnerability of industrial facilities to attacks with improvised explosive devices aimed at triggering domino scenarios , 2015, Reliab. Eng. Syst. Saf..

[37]  Zerrouki Hamza,et al.  Mapping Fault Tree into Bayesian Network in safety analysis of process system , 2015, 2015 4th International Conference on Electrical Engineering (ICEE).

[38]  Navid Khademi,et al.  A security vulnerability analysis model for dangerous goods transportation by rail – Case study: Chlorine transportation in Texas-Illinois , 2018, Safety Science.

[39]  Brian Veitch,et al.  Arctic shipping accident scenario analysis using Bayesian Network approach , 2017 .

[40]  M. Sam Mannan,et al.  Bayesian network based dynamic operational risk assessment , 2016 .

[41]  Yonghong Liu,et al.  Failure Probability Analysis for Emergency Disconnect of Deepwater Drilling Riser Using Bayesian Network , 2019, Bayesian Networks for Reliability Engineering.

[42]  Nima Khakzad,et al.  Security risk assessment and management in chemical plants: Challenges and new trends , 2018 .

[43]  Gabriele Landucci,et al.  Probabilistic Vulnerability Assessment of Chemical Plants Subjected to External Acts of Interference , 2016 .

[44]  Faisal Khan,et al.  Failure probability analysis of the urban buried gas pipelines using Bayesian networks , 2017 .

[45]  Jose Emmanuel Ramirez-Marquez,et al.  A generic method for estimating system reliability using Bayesian networks , 2009, Reliab. Eng. Syst. Saf..

[46]  Floris Goerlandt,et al.  A Bayesian Network risk model for assessing oil spill recovery effectiveness in the ice-covered Northern Baltic Sea. , 2019, Marine pollution bulletin.

[47]  Yang Lu,et al.  A game theory approach for the measurement of transport network vulnerability from the system prospective , 2014 .

[48]  Sohag Kabir,et al.  A fuzzy Bayesian network approach for risk analysis in process industries , 2017 .

[49]  David A. Moore Security Risk Assessment Methodology for the petroleum and petrochemical industries , 2013 .

[50]  Liangbin Xu,et al.  Dynamic Bayesian networks based approach for risk analysis of subsea wellhead fatigue failure during service life , 2019, Reliab. Eng. Syst. Saf..

[51]  Faisal Khan,et al.  Quantitative risk analysis of offshore drilling operations: A Bayesian approach , 2013 .

[52]  Do-Yeon Kim Cyber security issues imposed on nuclear power plants , 2014 .

[53]  Ádamo L. de Santana,et al.  Strategies for improving the modeling and interpretability of Bayesian networks , 2007, Data Knowl. Eng..

[54]  Valerio Cozzani,et al.  Analysis of physical and cyber security-related events in the chemical and process industry , 2018 .

[55]  Terje Aven,et al.  On the use of uncertainty importance measures in reliability and risk analysis , 2010, Reliab. Eng. Syst. Saf..

[56]  Yang Xiang,et al.  A survey on security control and attack detection for industrial cyber-physical systems , 2018, Neurocomputing.

[57]  Faisal Khan,et al.  Techniques and methodologies for risk analysis in chemical process industries , 1998 .

[58]  James A. Stori,et al.  A Bayesian network approach to root cause diagnosis of process variations , 2005 .

[59]  Maria Hänninen,et al.  Bayesian network model of maritime safety management , 2014, Expert Syst. Appl..

[60]  Laibin Zhang,et al.  A dynamic and quantitative risk assessment method with uncertainties for offshore managed pressure drilling phases , 2018 .

[61]  V. R. Renjith,et al.  Corroboration of sparse failure data through Bayesian estimation for natural gas cross country pipelines: A case study with reference to the Indian scenario , 2018, Journal of Loss Prevention in the Process Industries.

[62]  Tao Lin,et al.  An alternative characterization of a Bayesian network , 2003, Int. J. Approx. Reason..

[63]  Nima Khakzad,et al.  Safety analysis of process systems using Fuzzy Bayesian Network (FBN) , 2019, Journal of Loss Prevention in the Process Industries.

[64]  Mark Adrian van Staalduinen,et al.  A Barrier Based Methodology to Assess Site Security Risk , 2015 .

[65]  Philippe Weber,et al.  System Approach-Based Bayesian Network to AID Maintenance of Manufacturing Processes , 2001 .

[66]  Xianguo Wu,et al.  Towards a Fuzzy Bayesian Network Based Approach for Safety Risk Analysis of Tunnel‐Induced Pipeline Damage , 2016, Risk analysis : an official publication of the Society for Risk Analysis.

[67]  Jing Lin,et al.  Application of Bayesian Networks in Reliability Evaluation , 2019, IEEE Transactions on Industrial Informatics.

[68]  Luis G. Vargas,et al.  An optimization-based approach for the design of Bayesian networks , 2008, Math. Comput. Model..

[69]  Faisal Khan,et al.  Dynamic hazard identification and scenario mapping using Bayesian network , 2017 .

[70]  Nima Khakzad,et al.  Low-capacity utilization of process plants: A cost-robust approach to tackle man-made domino effects , 2019, Reliab. Eng. Syst. Saf..

[71]  J. P. Gupta,et al.  Security risk assessment: applying the concepts of fuzzy logic. , 2010, Journal of hazardous materials.

[72]  Paul Baybutt Assessing risks from threats to process plants: Threat and vulnerability analysis , 2002 .

[73]  Faisal I. Khan,et al.  Functional quantitative security risk analysis (QSRA) to assist in protecting critical process infrastructure , 2017, Reliab. Eng. Syst. Saf..

[74]  Gabriele Landucci,et al.  Advanced attractiveness assessment of process facilities with respect to malevolent external attacks , 2016 .

[75]  Iraj Mohammadfam,et al.  Risk modelling of a hydrogen gasholder using Fuzzy Bayesian Network (FBN) , 2020 .

[76]  Mohammad Reza Hairi Yazdi,et al.  Failure probability analysis by employing fuzzy fault tree analysis , 2017, Int. J. Syst. Assur. Eng. Manag..

[77]  Nima Khakzad,et al.  Safety analysis in process facilities: Comparison of fault tree and Bayesian network approaches , 2011, Reliab. Eng. Syst. Saf..

[78]  Qiang Ji,et al.  Learning Bayesian network parameters under incomplete data with domain knowledge , 2009, Pattern Recognit..

[79]  Yonghong Liu,et al.  A Bayesian network based method for reliability analysis of subsea blowout preventer control system , 2019, Journal of Loss Prevention in the Process Industries.

[80]  Hyo Sung Cho,et al.  Cyber security in nuclear industry – Analytic study from the terror incident in nuclear power plants (NPPs) , 2017 .

[81]  Faisal Khan,et al.  Domino effect analysis of dust explosions using Bayesian networks , 2016 .

[82]  Benoît Iung,et al.  Overview on Bayesian networks applications for dependability, risk analysis and maintenance areas , 2012, Eng. Appl. Artif. Intell..

[83]  Weimin Cui,et al.  Risk-based reconfiguration of safety monitoring system using dynamic Bayesian network , 2007, Reliab. Eng. Syst. Saf..

[84]  Luis M. de Campos,et al.  Bayesian network learning algorithms using structural restrictions , 2007, Int. J. Approx. Reason..

[85]  Paul Baybutt,et al.  Issues for security risk assessment in the process industries , 2017 .

[86]  M. van der Borst,et al.  An overview of PSA importance measures , 2001, Reliab. Eng. Syst. Saf..

[87]  Gabriele Landucci,et al.  Vulnerability assessment of chemical facilities to intentional attacks based on Bayesian Network , 2018, Reliab. Eng. Syst. Saf..

[88]  V. R. Renjith,et al.  Two-dimensional fuzzy fault tree analysis for chlorine release from a chlor-alkali industry using expert elicitation. , 2010, Journal of hazardous materials.

[89]  Brian Veitch,et al.  Dynamic risk assessment of escape and evacuation on offshore installations in a harsh environment , 2018 .

[90]  Stephen Butt,et al.  Safety and risk analysis of managed pressure drilling operation using Bayesian network , 2015 .

[91]  Gyunyoung Heo,et al.  Development of a cyber security risk model using Bayesian networks , 2015, Reliab. Eng. Syst. Saf..

[92]  Hacene Smadi,et al.  Bayesian Belief Network Used in the Chemical and Process Industry: A Review and Application , 2017, Journal of Failure Analysis and Prevention.

[93]  Jian Wang,et al.  A Bayesian Network for the Transportation Accidents of Hazardous Materials Handling Time Assessment , 2018 .

[94]  Luis M. de Campos,et al.  A comparison of learning algorithms for Bayesian networks: a case study based on data from an emergency medical service , 2004, Artif. Intell. Medicine.

[95]  Faisal Khan,et al.  Dynamic safety analysis of process systems by mapping bow-tie into Bayesian network , 2013 .

[96]  Robert Biernacki,et al.  Modeling of manufacturing processes by learning systems: The naïve Bayesian classifier versus artificial neural networks , 2005 .

[97]  Chiara Vianello,et al.  Risk management of terrorist attacks in the transport of hazardous materials using dynamic geoevents , 2009 .

[98]  Valerio Cozzani,et al.  A comparative analysis of security risk assessment methodologies for the chemical industry , 2019, Reliab. Eng. Syst. Saf..

[99]  Linda C. van der Gaag,et al.  Learning Bayesian network parameters under order constraints , 2006, Int. J. Approx. Reason..

[100]  Rym Kanes,et al.  Developing a framework for dynamic risk assessment using Bayesian networks and reliability data , 2017 .

[101]  Rafael Rumí,et al.  Bayesian networks in environmental modelling , 2011, Environ. Model. Softw..

[102]  Ccps Guidelines for Chemical Process Quantitative Risk Analysis , 1999 .

[103]  Poong Hyun Seong,et al.  Development of a quantitative method for identifying fault-prone cyber security controls in NPP digital I&C systems , 2020 .

[104]  Rick Nunes-Vaz,et al.  Designing physical security for complex infrastructures , 2014, Int. J. Crit. Infrastructure Prot..

[105]  Jose Miguel Puerta,et al.  Ant colony optimization for learning Bayesian networks , 2002, Int. J. Approx. Reason..

[106]  Ian Jenkinson,et al.  An Offshore Risk Analysis Method Using Fuzzy Bayesian Network , 2009 .

[107]  Janina Kleemann,et al.  Reprint of “Validation approaches of an expert-based Bayesian Belief Network in northern Ghana, West Africa” , 2018 .

[108]  V. R. Renjith,et al.  Application of dynamic risk analysis in offshore drilling processes , 2020 .

[109]  R. Krishnaprasad,et al.  System Safety Analysis for Critical System Applications Using Bayesian Networks , 2016 .

[110]  Wout Dullaert,et al.  Managing domino effect-related security of industrial areas , 2008 .

[111]  G. Malorgio,et al.  Adaptive capacity to climate change in the wine industry: A Bayesian Network approach , 2018, Wine Economics and Policy.

[112]  Liqiong Chen,et al.  Fuzzy fault tree analysis for fire and explosion of crude oil tanks , 2013 .

[113]  Min Xie,et al.  Probability analysis of offshore fire by incorporating human and organizational factor , 2011 .

[114]  Kerrie L. Mengersen,et al.  A proposed validation framework for expert elicited Bayesian Networks , 2013, Expert Syst. Appl..

[115]  Ali Azadeh,et al.  Dynamic safety risk modeling of process systems using bayesian network , 2017 .

[116]  Jian Shuai,et al.  Real-time risk analysis of road tanker containing flammable liquid based on fuzzy Bayesian network , 2020 .

[117]  Steven Lord,et al.  A More Rigorous Framework for Security-in-Depth , 2011 .

[118]  Edoardo Patelli,et al.  Applications of Bayesian Networks in Chemical and Process Industries: A Review , 2019 .

[119]  Wiktor Frid,et al.  Identification of sensitivities in Bayesian networks , 2004, Eng. Appl. Artif. Intell..

[120]  Muhittin Celik,et al.  A risk-based modelling approach to enhance shipping accident investigation , 2010 .

[121]  M. Cheok,et al.  Use of importance measures in risk-informed regulatory applications , 1998 .

[122]  Angelo Corallo,et al.  Cybersecurity for Industry 4.0 in the current literature: A reference framework , 2018, Comput. Ind..

[123]  Nima Khakzad,et al.  Dynamic safety assessment of natural gas stations using Bayesian network. , 2017, Journal of hazardous materials.

[124]  V. R. Renjith,et al.  Safety and Security of Process Plants: A Fuzzy-Based Bayesian Network Approach , 2020 .

[125]  M. Sam Mannan,et al.  Developing leading indicators-based decision support algorithms and probabilistic models using Bayesian network to predict kicks while drilling , 2019, Process Safety and Environmental Protection.

[126]  Andrés R. Masegosa,et al.  International Journal of Approximate Reasoning , 2022 .

[127]  Laura Uusitalo,et al.  Advantages and challenges of Bayesian networks in environmental modelling , 2007 .

[128]  D. von Winterfeldt,et al.  Identifying and Structuring the Objectives of Terrorists , 2010, Risk analysis : an official publication of the Society for Risk Analysis.

[129]  Sou-Sen Leu,et al.  Bayesian-network-based safety risk assessment for steel construction projects. , 2013, Accident; analysis and prevention.

[130]  J. Bromley,et al.  The use of Hugin® to develop Bayesian networks as an aid to integrated water resource planning , 2005, Environ. Model. Softw..

[131]  Yonghong Liu,et al.  Application of Bayesian Networks in Quantitative Risk Assessment of Subsea Blowout Preventer Operations , 2013, Risk analysis : an official publication of the Society for Risk Analysis.

[132]  Rui Zhou,et al.  Scenario analysis of mine water inrush hazard using Bayesian networks , 2016 .

[133]  Mary Lynn Garcia,et al.  The Design and Evaluation of Physical Protection Systems , 2001 .

[134]  Genserik Reniers,et al.  Terrorism security in the chemical industry: Results of a qualitative investigation , 2011 .

[135]  Sohag Kabir,et al.  Applications of Bayesian networks and Petri nets in safety, reliability, and risk assessments: A review , 2019, Safety Science.

[136]  Serena H. Chen,et al.  Good practice in Bayesian network modelling , 2012, Environ. Model. Softw..

[137]  Valerio Cozzani,et al.  Applying game theory for securing oil and gas pipelines against terrorism , 2019, Reliab. Eng. Syst. Saf..

[138]  Valerio Cozzani,et al.  Domino Effect Analysis Using Bayesian Networks , 2012, Risk analysis : an official publication of the Society for Risk Analysis.

[139]  Faisal Khan,et al.  Risk Analysis of Dust Explosion Scenarios Using Bayesian Networks , 2015, Risk analysis : an official publication of the Society for Risk Analysis.

[140]  Kang Liu,et al.  Risk Analysis on Leakage Failure of Natural Gas Pipelines by Fuzzy Bayesian Network with a Bow-Tie Model , 2017, Sci. Program..

[141]  Hans J. Pasman,et al.  Safety of the process industries in the 21st century: A changing need of process safety management for a changing industry , 2009 .

[142]  Faisal Khan,et al.  Copula-based Bayesian network model for process system risk assessment , 2019, Process Safety and Environmental Protection.

[143]  Shuping Huang,et al.  Assessing seismic vulnerability of urban road networks by a Bayesian network approach , 2019 .

[144]  Luis M. de Campos,et al.  A new approach for learning belief networks using independence criteria , 2000, Int. J. Approx. Reason..

[145]  Genserik Reniers,et al.  Preparing for major terrorist attacks against chemical clusters: Intelligently planning protection measures w.r.t. domino effects , 2014 .

[146]  V. Sevinç,et al.  A Bayesian network model for prediction and analysis of possible forest fire causes , 2020 .

[147]  Hans J. Pasman,et al.  Risk assessment by means of Bayesian networks: A comparative study of compressed and liquefied H2 transportation and tank station risks , 2012 .

[148]  Ming Yang,et al.  Security assessment of process facilities – Intrusion modeling , 2018 .

[149]  Ming Yang,et al.  Probabilistic assessment of integrated safety and security related abnormal events: a case of chemical plants , 2019, Safety Science.

[150]  Man Leung Wong,et al.  Learning Bayesian networks from incomplete databases using a novel evolutionary algorithm , 2008, Decis. Support Syst..

[151]  M Sam Mannan,et al.  Fuzzy risk matrix. , 2008, Journal of hazardous materials.

[152]  Min Li,et al.  Risk assessment of mine ignition sources using fuzzy Bayesian network , 2019, Process Safety and Environmental Protection.

[153]  Faisal Khan,et al.  Process system fault detection and diagnosis using a hybrid technique , 2018, Chemical Engineering Science.

[154]  Rui Zhou,et al.  Probabilistic analysis of natural gas pipeline network accident based on Bayesian network , 2017 .

[155]  Seth D. Guikema,et al.  Probabilistic Modeling of Terrorist Threats: A Systems Analysis Approach to Setting Priorities Among Countermeasures , 2002 .

[156]  Syed Imtiaz,et al.  Dynamic availability assessment of safety critical systems using a dynamic Bayesian network , 2018, Reliab. Eng. Syst. Saf..

[157]  Faisal Khan,et al.  Data-driven dynamic risk analysis of offshore drilling operations , 2018, Journal of Petroleum Science and Engineering.

[158]  Luigi Portinale,et al.  Improving the analysis of dependable systems by mapping fault trees into Bayesian networks , 2001, Reliab. Eng. Syst. Saf..

[159]  Carsten Riggelsen,et al.  Learning parameters of Bayesian networks from incomplete data via importance sampling , 2006, Int. J. Approx. Reason..

[160]  Hongwei Zhu,et al.  Quantitative risk analysis on leakage failure of submarine oil and gas pipelines using Bayesian network , 2016 .