Complex of Models for Network Security Assessment of Industrial Automated Control Systems
Keywords:
Information Security, Automated Control Systems, Network Attacks, Semi-Markov Processes, Integral Equations SystemAbstract
The modern enterprises apply network technologies to their automated industrial control systems. Along with advantages of the above approach the risk of network attacks on automated control systems increases significantly. Hence there is an urgent need to develop automated monitoring means being capable of unauthorized access detection and of an adequate response to it. The enterprise security system should take into account components interaction and involve the ability of self-renewal throughout the entire life cycle.
The partial models of functioning of automated control systems of an enterprise under information threats are offered taking into account parameters of states of the enterprise at its different levels, realization of network threats, counteraction measures, etc. For each model it is possible to form the state space of a part of an enterprise and on the basis of the series of tests to define state transition parameters thus enabling model representation in the form of a marked graph. The sequences of states possess the properties of semi-Markov processes so semi-Markov apparatus is applicable. Probabilities of state transitions could be computed as a result of numerical solution of the corresponding system of integral equations by Lagrange-Stieltjes technique.
Application of Semi-Markov apparatus for the detection of non-authorized activities during data transfer under network scanning attack proved the validity of the above methods. In addition its application results in creation of a set of security assurance measures to be undertaken. Having obtained state transition probabilities the development of integral security indicator becomes possible thus contributing to the enterprise performance enhancement.
References
2. Kasatkina T.I. et al. [Mathematical Modeling of Process Security Assessment Information Processing in Automated Control System]. Promyshlennye ASU i kontrollery – Industrial Automatic Control Systems and Controllers. 2017. vol. 1. pp. 15-28. (In Russ.).
3. Wang Y., Anokhin O., Anderla R. Concept and use Case Driven Approach for Mapping IT Security Requirements on System Assets and Processes in Industrie 4.0. System. 2017. vol. 1. pp. 207–212.
4. Shnurkov P.V., Gorshenin A.K., Belousov V.V. [Analytical solution of the optimal control task of a semi-Markov process with finite set of state]. Inforormatika i eyo Primeneniya – Informatics and Applications. 2016. Issue 10. vol. 4. pp. 72–88. (In Russ.).
5. Enina E.P. [The Assessment of the Efficiency of the Processes Functioning at Machine-building Enterprises]. Vestnik Voronezhskogo gosudarstvennogo tekhnicheskogo universiteta – Bulletin of Voronezh State Technical University. 2016. Issue 12. vol. 6. pp. 126–130. (In Russ.).
6. Vasiliev V.I., Gvozdev V.E., Guzairov M.B., Kirillova A.D. [Decision Support System for ensuring information security of automated technological processes control system]. Informasiya i Besopasnost’ – Information and Security. 2017. Issue. 20. vol. 4. pp. 618–623. (In Russ.).
7. Timpson D., Moradian E. A Methodology to Enhance Industrial Control System Security. Procedia Computer Science. 2018. vol. 126. pp. 2117–2126.
8. Koelemeijer D. Enhancing the Cyber Resilience of Critical Infrastructures through an Evaluation Methodology Based on Assurance Cases. Procedia Computer Science. 2018. vol. 126. pp. 1779–1791.
9. Fatkieva R.R. Systems of Information Security Indicators for Industrial Enterprises. Automatic Documentation and Mathematical Linguistics. 2019. vol. 53. no. 4. pp. 216–224.
10. Xu W., Tao Y., Yang C., Chen H. MSICST: Multiple-Scenario Industrial Control System Testbed for Security Research. CMC-Computers, Materials & Continua. 2019. vol. 60(2). pp. 691–705.
11. Bakker O.J. et al. Toward Process Control from Formal Models of Transformable Manufacturing Systems. Procedia CIRP. vol. 63. 2017. pp 521–526.
12. Xu W., Tao Y., Yang C., Chen H. MSICST: Multiple-Scenario Industrial Control System Testbed for Security Research. CMC-Computers, Materials & Continua. 2019. vol. 60(2). pp. 691–705.
13. Fatkieva R.R. [Modeling automated technological processes under conditions of information threats]. Nauchnyi vestnik Novosibirskogo gosudarstvennogo tekhnicheskogo universiteta – Science bulletin of the Novosibirsk state technical university. 2018. vol. 1 (70). pp. 167–176. (In Russ.).
14. Arpishkin M.I., Vulfin A.M., Vasilyev V.I., Nikonov A.V. Intelligent integrity monitoring system for technological process data. Journal of Physics: Conference Series. 2019. vol. 1368(5). pp. 052029.
15. Sun W. et al. A Novel Device Identification Method Based on Passive Measurement. Security and Communication Networks. 2019. vol. 2019. 11 p.
16. Jiang B., Zhu X., Huang D., Braatz R.D. Canonical variate analysis-based monitoring of process correlation structure using causal feature representation. Journal of Process Control. 2015. vol. 32. pp. 109–116.
17. Legkov K.E. [Models and Methods of Monitoring Parameters Characterizing the State of the Infocommunication Systems of a Special Purpose]. T-Comm – Journal T-Comm. 2016. Issue 10. vol. 1. pp. 11–17. (In Russ.).
18. Novikov I.S. [Calculation Methods for Quantitative Indicators of Complex Software System Reliability at the Design and Development Stages]. Trudy SPIIRAN – SPIIRAS Proceedings. 2008. vol. 6. pp. 86–111 (In Russ.).
19. Oficial'nyj sajt kompanii «Positive Technologies». Aktual'nye kiberugrozy: itogi 2019 goda. [Official website of the company "Positive Technologies". Current cyber threats: results of 2019] Available at: https://www.ptsecurity.com/ru-ru/research/analytics/cybersecurity-threatscape-2019 (accessed: 17.04.2020).
20. Kuskov V. [Smart and vulnerable: the dangers of IoT devices]. Informacionnaya bezopasnost – Information security. 2017. vol. 5. pp. 22–23. (In Russ.).
21. Landshaft ugroz dlya sistem promyshlennoj avtomatizacii. Pervoe polugodie 2019. [Landscape of threats to industrial automation systems. First six months of 2019]. Available at: https://ics-cert.kaspersky.ru/media/H1_2019_kaspersky_ICS_REPORT_RUS.pdf (accessed: 27.05.2020).
22. Sidorova O.I. [On infinite source Poisson model with heterogeneous sources]. Vestnik TvGU. Seriya: Prikladnaya matematika – Bulletin of Tver State University. Series: Applied Mathematics. 2015. vol. 1. pp. 47–66. (In Russ.).
23. Chernigovskiy A.V., Krivov M.V. Models of Network Traffic]. Vestnik AnGT – Bulletin of the Angara state Technical University. 2017. vol. 11. pp. 137–143. (In Russ.).
24. Brody S.M., Vlasenko O.N., Marchenko B.G. Raschyot i planirovanie ispytanij sistem na nadyozhnost' [Calculation and planning of reliability tests of systems]. Naukova dumka. 1970. 192 p. (In Russ.).
Published
How to Cite
Section
Copyright (c) Роза Равильевна Фаткиева, Елена Людвиговна Евневич
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors who publish with this journal agree to the following terms: Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).