Situational awareness for security adaptation in industrial control systems

Antti Evesti, Tapio Frantti

Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

5 Citations (Scopus)

Abstract

Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.
Original languageEnglish
Title of host publicationUbiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on
PublisherInstitute of Electrical and Electronic Engineers IEEE
Pages1-6
DOIs
Publication statusPublished - 10 Aug 2015
MoE publication typeA4 Article in a conference publication
Event7th International Conference on Ubiquitous and Future Networks - Sapporo, Japan
Duration: 7 Jul 201510 Jul 2015
Conference number: 7

Publication series

Name
ISSN (Print)2165-8528
ISSN (Electronic)2165-8536

Conference

Conference7th International Conference on Ubiquitous and Future Networks
Abbreviated titleICUFN
CountryJapan
CitySapporo
Period7/07/1510/07/15

Fingerprint

Control systems
Decision making
Critical infrastructures
Fuzzy set theory
Security systems
Linguistics

Keywords

  • control engineering computing
  • critical infrastructures
  • decision making
  • industrial control
  • security of data

Cite this

Evesti, A., & Frantti, T. (2015). Situational awareness for security adaptation in industrial control systems. In Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on (pp. 1-6). [7182484] Institute of Electrical and Electronic Engineers IEEE. https://doi.org/10.1109/ICUFN.2015.7182484
Evesti, Antti ; Frantti, Tapio. / Situational awareness for security adaptation in industrial control systems. Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on. Institute of Electrical and Electronic Engineers IEEE, 2015. pp. 1-6
@inproceedings{04145a103bb94c7c9dd11f7debcdb732,
title = "Situational awareness for security adaptation in industrial control systems",
abstract = "Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.",
keywords = "control engineering computing, critical infrastructures, decision making, industrial control, security of data",
author = "Antti Evesti and Tapio Frantti",
note = "Project : 101228",
year = "2015",
month = "8",
day = "10",
doi = "10.1109/ICUFN.2015.7182484",
language = "English",
publisher = "Institute of Electrical and Electronic Engineers IEEE",
pages = "1--6",
booktitle = "Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on",
address = "United States",

}

Evesti, A & Frantti, T 2015, Situational awareness for security adaptation in industrial control systems. in Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on., 7182484, Institute of Electrical and Electronic Engineers IEEE, pp. 1-6, 7th International Conference on Ubiquitous and Future Networks, Sapporo, Japan, 7/07/15. https://doi.org/10.1109/ICUFN.2015.7182484

Situational awareness for security adaptation in industrial control systems. / Evesti, Antti; Frantti, Tapio.

Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on. Institute of Electrical and Electronic Engineers IEEE, 2015. p. 1-6 7182484.

Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

TY - GEN

T1 - Situational awareness for security adaptation in industrial control systems

AU - Evesti, Antti

AU - Frantti, Tapio

N1 - Project : 101228

PY - 2015/8/10

Y1 - 2015/8/10

N2 - Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.

AB - Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.

KW - control engineering computing

KW - critical infrastructures

KW - decision making

KW - industrial control

KW - security of data

U2 - 10.1109/ICUFN.2015.7182484

DO - 10.1109/ICUFN.2015.7182484

M3 - Conference article in proceedings

SP - 1

EP - 6

BT - Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on

PB - Institute of Electrical and Electronic Engineers IEEE

ER -

Evesti A, Frantti T. Situational awareness for security adaptation in industrial control systems. In Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on. Institute of Electrical and Electronic Engineers IEEE. 2015. p. 1-6. 7182484 https://doi.org/10.1109/ICUFN.2015.7182484