sesa 18: e2

Research Article

Dynamic Risk Assessment and Analysis Framework for Large-Scale Cyber-Physical Systems

Download93 downloads
  • @ARTICLE{10.4108/eai.25-1-2022.172997,
        author={Adeel A. Malik and Deepak K. Tosh},
        title={Dynamic Risk Assessment and Analysis Framework for Large-Scale Cyber-Physical Systems},
        journal={EAI Endorsed Transactions on Security and Safety: Online First},
        volume={},
        number={},
        publisher={EAI},
        journal_a={SESA},
        year={2022},
        month={1},
        keywords={Risk Assessment, Vulnerability Assessment, NVD, MITRE ATT\&CK},
        doi={10.4108/eai.25-1-2022.172997}
    }
    
  • Adeel A. Malik
    Deepak K. Tosh
    Year: 2022
    Dynamic Risk Assessment and Analysis Framework for Large-Scale Cyber-Physical Systems
    SESA
    EAI
    DOI: 10.4108/eai.25-1-2022.172997
Adeel A. Malik1,*, Deepak K. Tosh1
  • 1: University of Texas at El Paso, El Paso, TX, USA
*Contact email: amalik@miners.utep.edu

Abstract

Cyberspace is growing at full tilt creating an amalgamation of disparate systems. This heterogeneity leads to increased system complexity and security flaws. It is crucial to understand and identify these flaws to prevent catastrophic events. However, the current state-of-the-art solutions are threat-specific and focus on either risk, vulnerabilities, or adversary emulation. In this work, we present a scalable Cyber-threats and Vulnerability Information Analyzer (CyVIA) framework. CyVIA analyzes cyber risks and abnormalities in real-time using multi-formatted knowledge bases derived from open-source vulnerability databases. CyVIA achieves the following goals: 1) assess the target network for risk and vulnerabilities, 2) map services and policies to network nodes, 3) classify nodes based on severity, and 4) provide consequences, mitigation, and relationships for the found vulnerabilities. We use CyVIA and other tools to examine a simulated network for threats and compare the results.