Ιδρυματικό Αποθετήριο
Πολυτεχνείο Κρήτης
Πολυτεχνείο Κρήτης
EN
|
EL
| URI | http://purl.tuc.gr/dl/dias/9218562F-E915-4939-806E-C748D8F20DA4 | - |
| Αναγνωριστικό | https://doi.org/10.5220/0010544001610172 | - |
| Αναγνωριστικό | https://www.scitepress.org/Link.aspx?doi=10.5220/0010544001610172 | - |
| Γλώσσα | en | - |
| Μέγεθος | 12 pages | en |
| Τίτλος | Towards integrating security in industrial engineering design practices | en |
| Δημιουργός | Dedousis Panagiotis | en |
| Δημιουργός | Stergiopoulos George | en |
| Δημιουργός | Arampatzis Georgios | en |
| Δημιουργός | Αραμπατζης Γεωργιος | el |
| Δημιουργός | Gritzalis, Dimitris | en |
| Εκδότης | SciTePress – Science and Technology Publications, Lda | en |
| Περίληψη | During the past decades, and especially since the Stuxnet event, there has being a growing concern around the protection of critical infrastructures. Even though the protection of such systems and services has been an international security priority, still, even after all those years, relevant research either focuses on individual ICS systems security (PLC, RTU and SCADA network protection and attacks), or uses high-level models to perform risk assessments, mostly from a system-of-systems scope that studies interdependencies. From an engineering perspective, current approaches address system resilience from an efficiency perspective (i.e. focusing on the availability of physical processes) while neglecting the security dimension of their components. Still, the availability and reliability requirements of such systems are directly affected by security incidents. To our knowledge, there is currently no process to integrate security-by-design in industrial critical infrastructure engineering. To this end, we present a method to integrate security risk assessment analysis into engineering design practices. We do this by modeling internal dependencies between physical components in critical industrial production processes to identify possible hotspots of system failures that are challenging to handle later in the development lifecycle, especially during operation. To validate our approach, we model and assess the present situation in a portion of an actual oil refining plant, thereby establishing a baseline model. Then we introduce risk mitigation measures by altering the design of the baseline model, resulting in a reduction of the overall cascade risk. | en |
| Τύπος | Δημοσίευση σε Συνέδριο | el |
| Τύπος | Conference Publication | en |
| Άδεια Χρήσης | http://creativecommons.org/licenses/by-nc-nd/4.0/ | en |
| Ημερομηνία | 2023-07-11 | - |
| Ημερομηνία Δημοσίευσης | 2021 | - |
| Θεματική Κατηγορία | Component cascading failures | en |
| Θεματική Κατηγορία | Critical infrastructure protection | en |
| Θεματική Κατηγορία | Dependency risk graphs | en |
| Θεματική Κατηγορία | Resilience | en |
| Βιβλιογραφική Αναφορά | P. Dedousis, G. Stergiopoulos, G. Arampatzis and D. Gritzalis, "Towards integrating security in industrial engineering design practices," in Proceedings of the 18th International Conference on Security and Cryptography (SECRYPT 2021), virtual event, 2021, pp. 161-172, doi: 10.5220/0010544001610172. | en |
Copyright © DIAS 2013
