Alrimawi, Faeq; Pasquale, Liliana; Mehta, Deepak and Nuseibeh, Bashar
(2018).
|
PDF (Accepted Manuscript)
- Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
Download (2MB) | Preview |
| DOI (Digital Object Identifier) Link: | https://doi.org/10.1145/3194707.3194714 |
|---|---|
| Google Scholar: | Look up in Google Scholar |
Abstract
An increasing number of security incidents in cyber-physical systems (CPSs) arise from the exploitation of cyber and physical components of such systems. Knowledge about how such incidents arose is rarely captured and used systematically to enhance security and support future incident investigations. In this paper, we propose an approach to represent and share incidents knowledge. Our approach captures incident patterns – common aspects of incidents occurring in different CPSs. Our approach then allows incident patterns to be instantiated for different systems to assess if and how such patterns can manifest again. To support our approach, we provide two meta-models that represent, respectively, incident patterns and the cyber-physical systems themselves. The incident meta-model captures the characteristics of incidents, such as assets and activities. The system meta-model captures cyber and physical components and their interactions, which may be exploited during an incident. We demonstrate the feasibility of our approach in the application domain of smart buildings, by tailoring the system meta-model to represent components and interactions in this domain.
| Item Type: | Conference or Workshop Item |
|---|---|
| Copyright Holders: | 2018 ACM |
| Keywords: | Cyber-Physical Systems; Incident Pattern; Smart Buildings; Meta-model |
| Academic Unit/School: | Faculty of Science, Technology, Engineering and Mathematics (STEM) > Computing and Communications Faculty of Science, Technology, Engineering and Mathematics (STEM) |
| Item ID: | 54308 |
| Depositing User: | Danielle Lilly |
| Date Deposited: | 25 Apr 2018 15:05 |
| Last Modified: | 02 May 2018 14:40 |
| URI: | http://oro.open.ac.uk/id/eprint/54308 |
| Share this page: |     |
Metrics
Altmetrics from Altmetric | Citations from Dimensions |
Download history for this item
These details should be considered as only a guide to the number of downloads performed manually. Algorithmic methods have been applied in an attempt to remove automated downloads from the displayed statistics but no guarantee can be made as to the accuracy of the figures.
CORE (COnnecting REpositories)
CORE (COnnecting REpositories)