Modeling Cyberattack Propagation and Impacts on Cyber-Physical System Safety: An Experiment - IRT SystemX Accéder directement au contenu
Article Dans Une Revue Electronics Année : 2022

Modeling Cyberattack Propagation and Impacts on Cyber-Physical System Safety: An Experiment

Nga Nguyen
Michel Batteux

Résumé

In this article, we present an experiment we conducted with discrete event simulations to analyze the effects of multi-step cyberattacks on the safety of cyber-physical systems. We show how to represent systems, their components (either software and/or hardware), communication links, security measures, and attacks from a malicious intruder. The latter are typically taken from the MITRE ATT&CK knowledge base. The discrete event simulation method makes it possible to represent any event affecting the system. We illustrate our approach by means of an illustrative example involving cyberattacks against the navigation system of an autonomous ship. We show how the formal modeling language AltaRica, primarily dedicated to safety analyses, can assess this illustrative example by representing the system and automatically extracting sequences of attacks, leading to a safety-critical situation, namely the deviation of the ship by the attacker. This article aims to discuss this approach and to outline the lessons learned from our experience.

Dates et versions

hal-03919905 , version 1 (03-01-2023)

Licence

Paternité

Identifiants

Citer

Théo Serru, Nga Nguyen, Michel Batteux, Antoine Rauzy. Modeling Cyberattack Propagation and Impacts on Cyber-Physical System Safety: An Experiment. Electronics, 2022, Analysis and Design of Complex Embedded Systems, 12 (1), pp.77. ⟨10.3390/electronics12010077⟩. ⟨hal-03919905⟩
46 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More