Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics

Reza Soltani; Milan Lopuhaä-Zwakenberg; Mariëlle Stoelinga

doi:10.1007/978-3-031-68606-1_14

Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics

Reza Soltani^*, Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

Abstract

Cyber-physical systems such as the advanced smart grid have a dynamic interaction between security, safety, and defense. Therefore, we need risk management strategies that take all three into account. This paper introduces a novel framework that seamlessly combines attack trees, fault trees, and defense mechanisms: Attack-Fault-Defense Trees (AFDTs). This model creates a common language using an easily understood visual aid designed for experts from various backgrounds, thereby accelerating multidisciplinary collaboration. We define the semantics and cut set metrics for AFDTs and explore how qualitative analysis can be done through cut set analysis. Furthermore, we provide a case study that revolves around a Gridshield lab, which is a set of remotely connected charging stations at the University of Twente campus, to demonstrate the practical implementation of AFDT analysis.

Original language	English
Title of host publication	Computer Safety, Reliability, and Security
Subtitle of host publication	43rd International Conference, SAFECOMP 2024, Florence, Italy, September 18–20, 2024, Proceedings
Editors	Andrea Ceccarelli, Mario Trapp, Andrea Bondavalli, Friedemann Bitsch
Place of Publication	Cham
Publisher	Springer
Pages	218-232
Number of pages	15
ISBN (Electronic)	978-3-031-68606-1
ISBN (Print)	978-3-031-68605-4
DOIs	https://doi.org/10.1007/978-3-031-68606-1_14
Publication status	Published - 9 Sept 2024
Event	43rd International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2024 - Florence, Italy Duration: 17 Sept 2024 → 20 Sept 2024 Conference number: 43

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	14988
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	43rd International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2024
Abbreviated title	SAFECOMP 2024
Country/Territory	Italy
City	Florence
Period	17/09/24 → 20/09/24

Keywords

2024 OA procedure
Smartgrid
Attack-Fault Tree
Safety
Attack-Defense Tree
Security

Access to Document

10.1007/978-3-031-68606-1_14

Cite this

Soltani, R., Lopuhaä-Zwakenberg, M., & Stoelinga, M. (2024). Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics. In A. Ceccarelli, M. Trapp, A. Bondavalli, & F. Bitsch (Eds.), Computer Safety, Reliability, and Security: 43rd International Conference, SAFECOMP 2024, Florence, Italy, September 18–20, 2024, Proceedings (pp. 218-232). ( Lecture Notes in Computer Science; Vol. 14988). Springer. https://doi.org/10.1007/978-3-031-68606-1_14

Soltani, Reza ; Lopuhaä-Zwakenberg, Milan ; Stoelinga, Mariëlle. / Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics. Computer Safety, Reliability, and Security: 43rd International Conference, SAFECOMP 2024, Florence, Italy, September 18–20, 2024, Proceedings. editor / Andrea Ceccarelli ; Mario Trapp ; Andrea Bondavalli ; Friedemann Bitsch. Cham : Springer, 2024. pp. 218-232 ( Lecture Notes in Computer Science).

@inproceedings{c54daba9c1bd43b281cbf99dae9bfafd,

title = "Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics",

abstract = "Cyber-physical systems such as the advanced smart grid have a dynamic interaction between security, safety, and defense. Therefore, we need risk management strategies that take all three into account. This paper introduces a novel framework that seamlessly combines attack trees, fault trees, and defense mechanisms: Attack-Fault-Defense Trees (AFDTs). This model creates a common language using an easily understood visual aid designed for experts from various backgrounds, thereby accelerating multidisciplinary collaboration. We define the semantics and cut set metrics for AFDTs and explore how qualitative analysis can be done through cut set analysis. Furthermore, we provide a case study that revolves around a Gridshield lab, which is a set of remotely connected charging stations at the University of Twente campus, to demonstrate the practical implementation of AFDT analysis.",

keywords = "2024 OA procedure, Smartgrid, Attack-Fault Tree, Safety, Attack-Defense Tree, Security",

author = "Reza Soltani and Milan Lopuha{\"a}-Zwakenberg and Mari{\"e}lle Stoelinga",

note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Switzerland AG 2024.; 43rd International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2024, SAFECOMP 2024 ; Conference date: 17-09-2024 Through 20-09-2024",

year = "2024",

month = sep,

day = "9",

doi = "10.1007/978-3-031-68606-1_14",

language = "English",

isbn = "978-3-031-68605-4",

series = " Lecture Notes in Computer Science",

publisher = "Springer",

pages = "218--232",

editor = "Andrea Ceccarelli and Mario Trapp and Andrea Bondavalli and Friedemann Bitsch",

booktitle = "Computer Safety, Reliability, and Security",

address = "Germany",

}

Soltani, R , Lopuhaä-Zwakenberg, M & Stoelinga, M 2024, Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics. in A Ceccarelli, M Trapp, A Bondavalli & F Bitsch (eds), Computer Safety, Reliability, and Security: 43rd International Conference, SAFECOMP 2024, Florence, Italy, September 18–20, 2024, Proceedings. Lecture Notes in Computer Science, vol. 14988, Springer, Cham, pp. 218-232, 43rd International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2024, Florence, Italy, 17/09/24. https://doi.org/10.1007/978-3-031-68606-1_14

Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics. / Soltani, Reza ; Lopuhaä-Zwakenberg, Milan ; Stoelinga, Mariëlle.
Computer Safety, Reliability, and Security: 43rd International Conference, SAFECOMP 2024, Florence, Italy, September 18–20, 2024, Proceedings. ed. / Andrea Ceccarelli; Mario Trapp; Andrea Bondavalli; Friedemann Bitsch. Cham: Springer, 2024. p. 218-232 ( Lecture Notes in Computer Science; Vol. 14988).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics

AU - Soltani, Reza

AU - Lopuhaä-Zwakenberg, Milan

AU - Stoelinga, Mariëlle

N1 - Conference code: 43

PY - 2024/9/9

Y1 - 2024/9/9

N2 - Cyber-physical systems such as the advanced smart grid have a dynamic interaction between security, safety, and defense. Therefore, we need risk management strategies that take all three into account. This paper introduces a novel framework that seamlessly combines attack trees, fault trees, and defense mechanisms: Attack-Fault-Defense Trees (AFDTs). This model creates a common language using an easily understood visual aid designed for experts from various backgrounds, thereby accelerating multidisciplinary collaboration. We define the semantics and cut set metrics for AFDTs and explore how qualitative analysis can be done through cut set analysis. Furthermore, we provide a case study that revolves around a Gridshield lab, which is a set of remotely connected charging stations at the University of Twente campus, to demonstrate the practical implementation of AFDT analysis.

AB - Cyber-physical systems such as the advanced smart grid have a dynamic interaction between security, safety, and defense. Therefore, we need risk management strategies that take all three into account. This paper introduces a novel framework that seamlessly combines attack trees, fault trees, and defense mechanisms: Attack-Fault-Defense Trees (AFDTs). This model creates a common language using an easily understood visual aid designed for experts from various backgrounds, thereby accelerating multidisciplinary collaboration. We define the semantics and cut set metrics for AFDTs and explore how qualitative analysis can be done through cut set analysis. Furthermore, we provide a case study that revolves around a Gridshield lab, which is a set of remotely connected charging stations at the University of Twente campus, to demonstrate the practical implementation of AFDT analysis.

KW - 2024 OA procedure

KW - Smartgrid

KW - Attack-Fault Tree

KW - Safety

KW - Attack-Defense Tree

KW - Security

UR - http://www.scopus.com/inward/record.url?scp=85204539220&partnerID=8YFLogxK

U2 - 10.1007/978-3-031-68606-1_14

DO - 10.1007/978-3-031-68606-1_14

M3 - Conference contribution

SN - 978-3-031-68605-4

T3 - Lecture Notes in Computer Science

SP - 218

EP - 232

BT - Computer Safety, Reliability, and Security

A2 - Ceccarelli, Andrea

A2 - Trapp, Mario

A2 - Bondavalli, Andrea

A2 - Bitsch, Friedemann

PB - Springer

CY - Cham

T2 - 43rd International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2024

Y2 - 17 September 2024 through 20 September 2024

ER -

Soltani R , Lopuhaä-Zwakenberg M , Stoelinga M. Safety-Security Analysis via Attack-Fault-Defense Trees: Semantics and Cut Set Metrics. In Ceccarelli A, Trapp M, Bondavalli A, Bitsch F, editors, Computer Safety, Reliability, and Security: 43rd International Conference, SAFECOMP 2024, Florence, Italy, September 18–20, 2024, Proceedings. Cham: Springer. 2024. p. 218-232. ( Lecture Notes in Computer Science). doi: 10.1007/978-3-031-68606-1_14