Skip to main content
Article
Mission-Aware Vulnerability Assessment for Cyber-Physical Systems
Proceedings - 14th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2015
  • Xiaotian Wang, Wright State University - Main Campus
  • Matthew Davis, Wright State University - Main Campus
  • Junjie Zhang, Wright State University - Main Campus
  • Vance Saunders, Wright State University - Main Campus
Document Type
Conference Proceeding
Publication Date
12-2-2015
Disciplines
Abstract

Designing secure cyber-physical systems (CPS) is fundamentally important and performing vulnerability assessment becomes indispensable. In this paper, we discuss our ongoing work on building an automated mission-aware vulnerability CPS assessment framework that can accomplish three objectives including i) mapping CPS missions into infrastructural components, ii) evaluating global impact of each vulnerability, and iii) achieving verifiable results and high flexibility. In order to accomplish these objectives, we follow a model-assisted analysis strategy. Specifically, we take advantage of CPS simulator to model the behaviors of CPS components under different missions, our framework facilitates a bottom-up approach to construct a holistic model of a CPS that aim at profiling relationships among all CPS components. Formal methods, including program symbolic execution, logic programming, and linear optimization, have been employed to analyze the model, which build mathematical rigor into our framework. The framework first identifies mission-critical components, then discovers all attack paths from system access points to mission-critical components, and finally recommends the optimized mitigation plan.

DOI
10.1109/Trustcom.2015.496
Citation Information
Xiaotian Wang, Matthew Davis, Junjie Zhang and Vance Saunders. "Mission-Aware Vulnerability Assessment for Cyber-Physical Systems" Proceedings - 14th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2015 (2015) p. 1148 - 1153
Available at: http://works.bepress.com/junjie_zhang/33/