@inproceedings{Teixeira:2012:AMS:2185505.2185515,
  author = {Teixeira, Andr{\'e} and P{\'e}rez, Daniel and Sandberg, Henrik and Johansson, Karl Henrik},
  title = {Attack Models and Scenarios for Networked Control Systems},
  booktitle = {Proceedings of the 1st International Conference on High Confidence Networked Systems (HiCoNS)},
  year = {2012},
  pages = {55--64},
  numpages = {10},
  doi = {http://dx.doi.org/10.1145/2185505.2185515},
  keywords = {attack space, cyber-physical systems, secure control systems, security},
  abstract = {Cyber-secure networked control is modeled, analyzed, and experimentally illustrated in this paper. An attack space defined by the adversary's system knowledge, disclosure, and disruption resources is introduced. Adversaries constrained by these resources are modeled for a networked control system architecture. It is shown that attack scenarios corresponding to replay, zero dynamics, and bias injection attacks can be analyzed using this framework. An experimental setup based on a quadruple-tank process controlled over a wireless network is used to illustrate the attack scenarios, their consequences, and potential counter-measures.}
}

@incollection{ShaMeseguer2008,
  year = {2008},
  booktitle = {Software-Intensive Systems and New Computing Paradigms},
  volume = {5380},
  series = {Lecture Notes in Computer Science},
  doi = {http://dx.doi.org/10.1007/978-3-540-89437-7_5},
  title = {Design of Complex Cyber Physical Systems with Formalized Architectural Patterns},
  author = {Sha, Lui and Meseguer, Jos{\'e}},
  pages = {92--100},
  abstract = {The design of cyber physical systems (CPS) presents many challenges because of their complexity, strong safety requirements, distribution, and real-time nature. We propose a novel paradigm, based on the idea of using simplicity to control complexity, to achieve highly reliable CPS designs. The goal is to embody design rules of this complexity-control nature in highly reusable, very robust, and formally verified architectural patterns. We discuss some preliminary work and experiments illustrating how this can be done for CPS systems.}
}

@inproceedings{Rajkumar:2010:CSN:1837274.1837461,
  author = {Rajkumar, Ragunathan (Raj) and Lee, Insup and Sha, Lui and Stankovic, John},
  title = {Cyber-physical systems: the next computing revolution},
  booktitle = {Proceedings of the 47th Design Automation Conference (DAC)},
  year = {2010},
  pages = {731--736},
  numpages = {6},
  doi = {http://dx.doi.org/10.1145/1837274.1837461},
  keywords = {computer science, cyber-physical systems, engineering, grand challenges, new frontiers},
  abstract = {Cyber-physical systems (CPS) are physical and engineered systems whose operations are monitored, coordinated, controlled and integrated by a computing and communication core. Just as the internet transformed how humans interact with one another, cyber-physical systems will transform how we interact with the physical world around us. Many grand challenges await in the economically vital domains of transportation, health-care, manufacturing, agriculture, energy, defense, aerospace and buildings. The design, construction and verification of cyber-physical systems pose a multitude of technical challenges that must be addressed by a cross-disciplinary community of researchers and educators.}
}

@inproceedings{Templeton:2001:RMC:366173.366187,
  author = {Templeton, Steven J. and Levitt, Karl},
  title = {A requires/provides model for computer attacks},
  booktitle = {Proceedings of the Workshop on New Security Paradigms (NSPW)},
  year = {2000},
  pages = {31--38},
  numpages = {8},
  doi = {http://dx.doi.org/10.1145/366173.366187}
}

@incollection{Kordy+2011,
  year = {2011},
  booktitle = {Formal Aspects of Security and Trust},
  volume = {6561},
  series = {Lecture Notes in Computer Science},
  doi = {http://dx.doi.org/10.1007/978-3-642-19751-2_6},
  title = {Foundations of Attack-Defense Trees},
  author = {Kordy, Barbara and Mauw, Sjouke and Radomirovi{\'c}, Sa{\~s}a and Schweitzer, Patrick},
  pages = {80--95},
  abstract = {We introduce and give formal definitions of attack–defense trees. We argue that these trees are a simple, yet powerful tool to analyze complex security and privacy problems. Our formalization is generic in the sense that it supports different semantical approaches. We present several semantics for attack–defense trees along with usage scenarios, and we show how to evaluate attributes.}
}

@incollection{Kordy+2012,
  year = {2012},
  booktitle = {Security and Intelligent Information Systems},
  volume = {7053},
  series = {Lecture Notes in Computer Science},
  doi = {http://dx.doi.org/10.1007/978-3-642-25261-7_8},
  title = {Computational Aspects of Attack-Defense Trees},
  author = {Kordy, Barbara and Pouly, Marc and Schweitzer, Patrick},
  pages = {103--116},
  abstract = {Attack–defense trees extend attack trees with defense nodes. This richer formalism allows for a more precise modeling of a system's vulnerabilities, by representing interactions between possible attacks and corresponding defensive measures. In this paper we compare the computational complexity of both formalisms. We identify semantics for which extending attack trees with defense nodes does not increase the computational complexity. This implies that, for these semantics, every query that can be solved efficiently on attack trees can also be solved efficiently on attack–defense trees. Furthermore, every algorithm for attack trees can directly be used to process attack–defense trees.}
}

@article{6363516,
  author = {Pieters, W. and Dimkov, T. and Pavlovic, D.},
  journal = {IEEE Systems Journal},
  title = {Security Policy Alignment: A Formal Approach},
  year = {2012},
  month = { },
  volume = {PP},
  number = {99},
  pages = {1},
  abstract = {Security policy alignment concerns the matching of security policies specified at different levels in socio-technical systems, and delegated to different agents, technical and human. For example, the policy that sales data should not leave an organization is refined into policies on door locks, firewalls and employee behavior, and this refinement should be correct with respect to the original policy. Although alignment of security policies in socio-technical systems has been discussed in the literature, especially in relation to business goals, there has been no formal treatment of this topic so far in terms of consistency and completeness of policies. Wherever formal approaches are used in policy alignment, these are applied to well-defined technical access control scenarios instead. Therefore, we aim at formalizing security policy alignment for complex socio-technical systems in this paper, and our formalization is based on predicates over sequences of actions. We discuss how this formalization provides the foundations for existing and future methods for finding security weaknesses induced by misalignment of policies in socio-technical systems.},
  keywords = {Attack trees;security logics;security policies;security policy alignment;security policy refinement;socio-technical systems;system models;},
  doi = {http://dx.doi.org/10.1109/JSYST.2012.2221933}
}

@inproceedings{Pieters:2012:MSM:2413296.2413298,
  author = {Pieters, Wolter and van der Ven, Sanne H.G. and Probst, Christian W.},
  title = {A move in the security measurement stalemate: elo-style ratings to quantify vulnerability},
  booktitle = {Workshop on New Security Paradigms (NSPW)},
  year = {2012},
  pages = {1--14},
  numpages = {14},
  doi = {http://dx.doi.org/10.1145/2413296.2413298},
  keywords = {control strength, elo, item response theory, rating systems, risk assessment, security metrics, threat capability, vulnerability},
  abstract = {One of the big problems of risk assessment in information security is the quantification of risk-related properties, such as vulnerability. Vulnerability expresses the likelihood that a threat agent acting against an asset will cause impact, for example, the likelihood that an attacker will be able to crack a password or break into a system. This likelihood depends on the capabilities of the threat agent and the strength of the controls in place. In this paper, we provide a framework for estimating these three variables based on the Elo rating used for chess players. This framework re-interprets security from the field of Item Response Theory. By observing the success of threat agents against assets, one can rate the strength of threats and controls, and predict the vulnerability of systems to particular threats. The application of Item Response Theory to the field of risk is new, but analogous to its application to children solving math problems. It provides an innovative and sound way to quantify vulnerability in models of (information) security.}
}

@inproceedings{Zhu:2012:DGA:2185505.2185512,
  author = {Zhu, Quanyan and Ba\c{s}ar, Tamer},
  title = {A dynamic game-theoretic approach to resilient control system design for cascading failures},
  booktitle = {1st International Conference on High Confidence Networked Systems (HiCoNS)},
  year = {2012},
  pages = {41--46},
  numpages = {6},
  doi = {http://dx.doi.org/10.1145/2185505.2185512},
  keywords = {cyber-physical systems, differential games, game theory, markov games, nash equilibrium},
  abstract = {The migration of many current critical infrastructures, such as power grids and transportations systems, into open public networks has posed many challenges in control systems. Modern control systems face uncertainties not only from the physical world but also from the cyber space. In this paper, we propose a hybrid game-theoretic approach to investigate the coupling between cyber security policy and robust control design. We study in detail the case of cascading failures in industrial control systems and provide a set of coupled optimality criteria in the linear-quadratic case. This approach can be further extended to more general cases of parallel cascading failures.}
}

@inproceedings{6309291,
  author = {Rieger, Craig and Quanyan Zhu and Ba\c{s}ar, Tamer},
  booktitle = {5th International Symposium on Resilient Control Systems (ISRCS)},
  title = {Agent-based cyber control strategy design for resilient control systems: Concepts, architecture and methodologies},
  year = {2012},
  month = aug,
  pages = {40--47},
  abstract = {The implementation of automated regulatory control has been around since the middle of the last century through analog means. It has allowed engineers to operate the plant more consistently by focusing on overall operations and settings instead of individual monitoring of local instruments (inside and outside of a control room). A similar approach is proposed for cyber security, where current border-protection designs have been inherited from information technology developments that lack consideration of the high-reliability, high consequence nature of industrial control systems. Instead of an independent development, however, an integrated approach is taken to develop a holistic understanding of performance. This performance takes shape inside a multi-agent design, which provides a notional context to model highly decentralized and complex industrial process control systems, the nervous system of critical infrastructure. The resulting strategy will provide a framework for researching solutions to security and unrecognized interdependency concerns with industrial control systems.},
  keywords = {Computer security;Control systems;Control theory;Process control;Sensors;Software;computer network security;control system CAD;decentralised control;multi-agent systems;process control;reliability;Cyber security;agent-based Cyber control strategy design;automated regulatory control;border-protection designs;complex industrial process control systems;critical infrastructure;decentralized industrial process control systems;high-reliability industrial control systems;information technology developments;multiagent design;resilient control systems;complex networked control systems;cyber awareness;cyber physical systems;cyber security;data fusion;hierarchical architecture;human systems;resilient control;},
  doi = {http://dx.doi.org/10.1109/ISRCS.2012.6309291}
}

@inproceedings{6133080,
  author = {Berthier, R. and Sanders, W.H.},
  booktitle = {17th Pacific Rim International Symposium on Dependable Computing (PRDC)},
  title = {Specification-Based Intrusion Detection for Advanced Metering Infrastructures},
  year = {2011},
  month = dec,
  pages = {184--193},
  abstract = {It is critical to develop an effective way to monitor advanced metering infrastructures (AMI). To ensure the security and reliability of a modernized power grid, the current deployment of millions of smart meters requires the development of innovative situational awareness solutions to prevent compromised devices from impacting the stability of the grid and the reliability of the energy distribution infrastructure. To address this issue, we introduce a specification-based intrusion detection sensor that can be deployed in the field to identify security threats in real time. This sensor monitors the traffic among meters and access points at the network, transport, and application layers to ensure that devices are running in a secure state and their operations respect a specified security policy. It does this by implementing a set of constraints on transmissions made using the C12.22 standard protocol that ensure that all violations of the specified security policy will be detected. The soundness of these constraints was verified using a formal framework, and a prototype implementation of the sensor was evaluated with realistic AMI network traffic.},
  keywords = {Authentication;Intrusion detection;Monitoring;Protocols;Reliability;Timing;automatic meter reading;computer network security;formal specification;power distribution reliability;power meters;power system measurement;power system security;sensors;smart power grids;transport protocols;AMI network traffic;C12.22 standard protocol;access points;advanced metering infrastructure;energy distribution infrastructure reliability;innovative situational awareness solutions;modernized power grid security;security policy;security threat identify;sensor;smart meters;specification based intrusion detection;traffic monitoring;AMI;formal method;intrusion detection;specification-based security;},
  doi = {http://dx.doi.org/10.1109/PRDC.2011.30}
}

@inproceedings{Ou:2005:MLN:1251398.1251406,
  author = {Ou, Xinming and Govindavajhala, Sudhakar and Appel, Andrew W.},
  title = {{MulVAL}: a logic-based network security analyzer},
  booktitle = {Proceedings of the 14th USENIX Security Symposium},
  year = {2005},
  abstract = {To determine the security impact software vulnerabilities have on a particular network, one must consider interactions among multiple network elements. For a vulnerability analysis tool to be useful in practice, two features are crucial. First, the model used in the analysis must be able to automatically integrate formal vulnerability specifications from the bug-reporting community. Second, the analysis must be able to scale to networks with thousands of machines. \par We show how to achieve these two goals by presenting MulVAL, an end-to-end framework and reasoning system that conducts multihost, multistage vulnerability analysis on a network. MulVAL adopts Datalog as the modeling language for the elements in the analysis (bug specification, configuration description, reasoning rules, operating-system permission and privilege model, etc.). We easily leverage existing vulnerability-database and scanning tools by expressing their output in Datalog and feeding it to our MulVAL reasoning engine. Once the information is collected, the analysis can be performed in seconds for networks with thousands of machines. \par We implemented our framework on the Red Hat Linux platform. Our framework can reason about 84\% of the Red Hat bugs reported in OVAL, a formal vulnerability definition language. We tested our tool on a real network with hundreds of users. The tool detected a policy violation caused by software vulnerabilities and the system administrators took remediation measures.},
  url = {http://static.usenix.org/event/sec05/tech/full_papers/ou/ou_html/}
}

@inproceedings{6271180,
  author = {Mougouei, D. and Moghtadaei, M. and Moradmand, S.},
  booktitle = {International Conference on Computer and Communication Engineering (ICCCE)},
  title = {A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems},
  year = {2012},
  month = jul,
  pages = {200--205},
  abstract = {Large amount of (security) faults existing in software systems could be complex and hard to identify during the fault analysis. So, it is not always possible to fully mitigate the internal or external security faults (vulnerabilities or threats) within the system. On the other hand, existence of faults in the system may eventually lead to a security failure. To avoid security failure of the target system we need to make it flexible and tolerant in the presence of security faults. This paper introduces a goal-based modeling approach to develop security requirements of security-critical systems (SCSs) by explicitly factoring the faults into the requirement engineering process. Our approach establishes a model for security requirements (SRM) with respect to the formally described model of security faults (SFM). We care for fault tolerance in SRM by taking into consideration partial satisfaction of security goals. The proposed approach factors this partiality into the goals by applying proper mitigation techniques during the refinement process. This eventually contributes to a fault tolerant model for security requirements of the target system.},
  keywords = {Analytical models;Computational modeling;Fault diagnosis;Fault tolerance;Fault tolerant systems;Security;Unified modeling language;fault tolerance;security of data;software engineering;fault analysis;fault tolerant model;fault tolerant security critical systems;goal based modeling approach;refinement process;security failure;security faults;security requirements;software systems;intrusion tolerance;security fault;threat;vulnerability;},
  doi = {http://dx.doi.org/10.1109/ICCCE.2012.6271180}
}

This file was generated by bibtex2html 1.96.