his.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
A Semantic Framework With Humans in the Loop for Vulnerability-Assessment in Cyber-Physical Production Systems
University of Skövde, School of Informatics. University of Skövde, The Informatics Research Centre. (Distribuerade realtidssystem (DRTS), Distributed Real-Time Systems)ORCID iD: 0000-0003-4791-8452
University of Skövde, School of Informatics. University of Skövde, The Informatics Research Centre. (Distribuerade realtidssystem (DRTS), Distributed Real-Time Systems)ORCID iD: 0000-0002-7312-9089
University of Skövde, School of Informatics. University of Skövde, The Informatics Research Centre. (Distribuerade realtidssystem (DRTS), Distributed Real-Time Systems)ORCID iD: 0000-0002-8927-0968
University of Skövde, School of Engineering Science. University of Skövde, The Virtual Systems Research Centre. (Production and automation engineering, Produktion och automatiseringsteknik)ORCID iD: 0000-0003-1781-2753
2019 (English)Conference paper, Published paper (Refereed)
Abstract [en]

Criticalmanufacturingprocessesinsmartnetworkedsystems such as Cyber-Physical Production Systems (CPPSs) typically require guaranteed quality-of-service performances, which is supported by cyber- security management. Currently, most existing vulnerability-assessment techniques mostly rely on only the security department due to limited communication between di↵erent working groups. This poses a limitation to the security management of CPPSs, as malicious operations may use new exploits that occur between successive analysis milestones or across departmental managerial boundaries. Thus, it is important to study and analyse CPPS networks’ security, in terms of vulnerability analysis that accounts for humans in the production process loop, to prevent potential threats to infiltrate through cross-layer gaps and to reduce the magnitude of their impact. We propose a semantic framework that supports the col- laboration between di↵erent actors in the production process, to improve situation awareness for cyberthreats prevention. Stakeholders with dif- ferent expertise are contributing to vulnerability assessment, which can be further combined with attack-scenario analysis to provide more prac- tical analysis. In doing so, we show through a case study evaluation how our proposed framework leverages crucial relationships between vulner- abilities, threats and attacks, in order to narrow further the risk-window induced by discoverable vulnerabilities.

Place, publisher, year, edition, pages
2019.
Keywords [en]
Cyber-Physical Production System Security, Human-in-the-Loop, Vulnerability Assessment, Semantic Model, Reference Model
National Category
Embedded Systems Other Electrical Engineering, Electronic Engineering, Information Engineering Information Systems Human Computer Interaction
Research subject
Distributed Real-Time Systems; Production and Automation Engineering
Identifiers
URN: urn:nbn:se:his:diva-17754OAI: oai:DiVA.org:his-17754DiVA, id: diva2:1357270
Conference
The 14th International Conference on Risks and Security of Internet and Systems, Hammamet, Tunisia, October 29-31, 2019
Projects
ELVIRA
Note

EU ISF Project A431.678/2016 ELVIRA

Available from: 2019-10-03 Created: 2019-10-03 Last updated: 2019-11-07

Open Access in DiVA

No full text in DiVA

Authority records BETA

Jiang, YuningAtif, YacineDing, JianguoWang, Wei

Search in DiVA

By author/editor
Jiang, YuningAtif, YacineDing, JianguoWang, Wei
By organisation
School of InformaticsThe Informatics Research CentreSchool of Engineering ScienceThe Virtual Systems Research Centre
Embedded SystemsOther Electrical Engineering, Electronic Engineering, Information EngineeringInformation SystemsHuman Computer Interaction

Search outside of DiVA

GoogleGoogle Scholar

urn-nbn

Altmetric score

urn-nbn
Total: 380 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf