Threat navigator: grouping and ranking malicious external threats to current and future urban smart grids

Alexandr Vasenev, L. Montoya, Andrea Ceccarelli, Anhtuan Le, Dan Ionita

    Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademic

    6 Citations (Scopus)
    73 Downloads (Pure)

    Abstract

    Deriving value judgements about threat rankings for large and entangled systems, such as those of urban smart grids, is a challenging task. Suitable approaches should account for multiple threat events posed by different classes of attackers who target system components. Given the complexity of the task, a suitable level of guidance for ranking more relevant and filtering out the less relevant threats is desirable. This requires a method able to distill the list of all possible threat events in a traceable and repeatable manner, given a set of assumptions about the attackers. The Threat Navigator proposed in this paper tackles this issue. Attacker profiles are described in terms of Focus (linked to Actor-to-Asset relations) and Capabilities (Threat-to-Threat dependencies). The method is demonstrated on a sample urban Smart Grid. The ranked list of threat events obtained is useful for a risk analysis that ultimately aims at finding cost-effective mitigation strategies.
    Original languageUndefined
    Title of host publication1st EAI International Conference on Smart Grid Inspired Future
    Place of PublicationLondon
    PublisherSpringer
    Pages184-192
    Number of pages8
    ISBN (Print)978-3-319-47729-9
    DOIs
    Publication statusPublished - May 2016
    Event1st EAI International Conference on Smart Grid Inspired Future, SmartGift 2016 - Liverpool, United Kingdom
    Duration: 19 May 201620 May 2016
    Conference number: 1
    http://smartgiftconf.org/2016/

    Publication series

    Name
    PublisherSpringer Verlag

    Conference

    Conference1st EAI International Conference on Smart Grid Inspired Future, SmartGift 2016
    Abbreviated titleSmartGift
    CountryUnited Kingdom
    CityLiverpool
    Period19/05/1620/05/16
    Internet address

    Keywords

    • SCS-Cybersecurity
    • IR-100453
    • METIS-316929
    • EWI-27019

    Cite this