Model-Based Cybersecurity Analysis: Extending Enterprise Modeling to Critical Infrastructure Cybersecurity
Manfred Jeusfeld
Part 1: Presentation
License: Creative Common BY-ND-NC
Abstract: The tutorial shall introduce into a taxonomy-based modeling of enterprise networks in the area of critical infrastructures. The taxonomy covers physical assets, control hardware, network components, software components and communication channels between software components. We discuss how the integrated part models are used to measure the criticality of software components to cyber attacks. An example from the power grid domain shows the functions of an implementation.
Goals:
- To understand how highly detailed models of a physical process can be linked to the control software
- To understand how disruptions on the software side lead to disruptions of the physical process
- To understand how the taxonomy can be adapted to apply the method to different types of physical processed such as district heating vs. power grids
References: