Situational awareness for security adaptation in industrial control systems

Antti Evesti; Tapio Frantti

doi:10.1109/ICUFN.2015.7182484

Situational awareness for security adaptation in industrial control systems

Antti Evesti, Tapio Frantti

VTT Technical Research Centre of Finland

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

5 Citations (Scopus)

Abstract

Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.

Original language	English
Title of host publication	Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on
Publisher	IEEE Institute of Electrical and Electronic Engineers
Pages	1-6
DOIs	https://doi.org/10.1109/ICUFN.2015.7182484
Publication status	Published - 10 Aug 2015
MoE publication type	A4 Article in a conference publication
Event	7th International Conference on Ubiquitous and Future Networks - Sapporo, Japan Duration: 7 Jul 2015 → 10 Jul 2015 Conference number: 7

Conference

Conference	7th International Conference on Ubiquitous and Future Networks
Abbreviated title	ICUFN
Country/Territory	Japan
City	Sapporo
Period	7/07/15 → 10/07/15

Keywords

control engineering computing
critical infrastructures
decision making
industrial control
security of data

Access to Document

10.1109/ICUFN.2015.7182484

Cite this

@inproceedings{04145a103bb94c7c9dd11f7debcdb732,

title = "Situational awareness for security adaptation in industrial control systems",

abstract = "Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.",

keywords = "control engineering computing, critical infrastructures, decision making, industrial control, security of data",

author = "Antti Evesti and Tapio Frantti",

note = "Project : 101228 ; 7th International Conference on Ubiquitous and Future Networks, ICUFN ; Conference date: 07-07-2015 Through 10-07-2015",

year = "2015",

month = aug,

day = "10",

doi = "10.1109/ICUFN.2015.7182484",

language = "English",

pages = "1--6",

booktitle = "Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

}

Evesti, A & Frantti, T 2015, Situational awareness for security adaptation in industrial control systems. in Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on., 7182484, IEEE Institute of Electrical and Electronic Engineers, pp. 1-6, 7th International Conference on Ubiquitous and Future Networks, Sapporo, Japan, 7/07/15. https://doi.org/10.1109/ICUFN.2015.7182484

Situational awareness for security adaptation in industrial control systems. / Evesti, Antti; Frantti, Tapio.

Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on. IEEE Institute of Electrical and Electronic Engineers, 2015. p. 1-6 7182484.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Situational awareness for security adaptation in industrial control systems

AU - Evesti, Antti

AU - Frantti, Tapio

N1 - Conference code: 7

PY - 2015/8/10

Y1 - 2015/8/10

N2 - Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.

AB - Situational Awareness (SA) offers an analysed view of system's security posture. Securing Industrial Control Systems (ICSs) and critical infrastructures requires timely and correct SA. System administrators make decisions and modify security mechanisms based on SA information. In this paper, we envision how security adaptation can facilitate administrators' work in the ICS protection. Security adaptation is not widely applied in ICS context. Moreover, existing security adaptation approaches concentrate on recognition of an adaptation need, i.e,. building situational awareness, instead of security decision making. Therefore, we present steps to create a security adaptation plan, and apply fuzzy set theory and linguistic relations for decision making, when SA information indicates that required security is not reached.

KW - control engineering computing

KW - critical infrastructures

KW - decision making

KW - industrial control

KW - security of data

U2 - 10.1109/ICUFN.2015.7182484

DO - 10.1109/ICUFN.2015.7182484

M3 - Conference article in proceedings

SP - 1

EP - 6

BT - Ubiquitous and Future Networks (ICUFN), 2015 Seventh International Conference on

PB - IEEE Institute of Electrical and Electronic Engineers

T2 - 7th International Conference on Ubiquitous and Future Networks

Y2 - 7 July 2015 through 10 July 2015

ER -

Situational awareness for security adaptation in industrial control systems

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this