Modelling Security of Critical Infrastructures: A Survivability Assessment

Rodríguez, Ricardo (Universidad de Zaragoza) ; Merseguer, José (Universidad de Zaragoza) ; Bernardi, Simona

Resumen: Critical infrastructures, usually designed to handle disruptions caused by human errors or random acts of nature, define assets whose normal operation must be guaranteed to maintain its essential services for human daily living. Malicious intended attacks to these targets need to be considered during system design. To face these situations, defence plans must be developed in advance. In this paper, we present a Unified Modelling Language profile, named SecAM, that enables the modelling and security specification for critical infrastructures during the early phases (requirements, design) of system development life cycle. SecAM enables security assessment, through survivability analysis, of different security solutions before system deployment. As a case study, we evaluate the survivability of the Saudi Arabia crude-oil network under two different attack scenarios. The stochastic analysis, carried out with Generalized Stochastic Petri nets, quantitatively estimates the minimization of attack damages on the crude-oil network.

Idioma: Inglés

DOI: 10.1093/comjnl/bxu096

Año: 2015

Publicado en: COMPUTER JOURNAL 58, 10 (2015), 2313-2327
ISSN: 0010-4620

Factor impacto JCR: 1.0 (2015)

Categ. JCR: COMPUTER SCIENCE, HARDWARE & ARCHITECTURE rank: 27 / 51 = 0.529 (2015) - Q3 - T2
Categ. JCR: COMPUTER SCIENCE, THEORY & METHODS rank: 53 / 105 = 0.505 (2015) - Q3 - T2
Categ. JCR: COMPUTER SCIENCE, SOFTWARE ENGINEERING rank: 53 / 106 = 0.5 (2015) - Q2 - T2
Categ. JCR: COMPUTER SCIENCE, INFORMATION SYSTEMS rank: 85 / 143 = 0.594 (2015) - Q3 - T2

Factor impacto SCIMAGO: 0.338 - Computer Science (miscellaneous) (Q2)

Financiación: info:eu-repo/grantAgreement/ES/MINECO/TIN2011-24932

Tipo y forma: Article (PostPrint)

Área (Departamento): Área Lenguajes y Sistemas Inf. (Dpto. Informát.Ingenie.Sistms.)