Cyber-Security Evaluation for a Hypothetical Nuclear Power Plant using the Attack Tree Method

Authors

  • Akinjide A. Akinola Chemical Engineering Department, University of Lagos, Lagos, Nigeria
  • Ayoade Kuye Center for Energy Studies, University of Port-Harcourt, Port-Harcourt, Nigeria
  • Aiodun Ayodeji Center for Energy Studies, University of Port-Harcourt, Port-Harcourt, Nigeria

Keywords:

Attack Tree, Cyber-Attacks, Cyber-Security, Return on Attack, Vulnerability Assessment, Nuclear Power Plant

Abstract

The widespread introduction of digital network systems in nuclear power plants has increased such infrastructures vulnerability to cyber-attacks. The attack tree approach to evaluate and analyze cyber-attacks quantitatively, in a nuclear power plants' network system is presented in this work. Information on a hypothetical nuclear power plants' network system was used to build attack trees that show different attack paths that external adversaries can use to compromise the network system. To assert the ease or difficulty of compromising each attack tree, numerical values are assigned to the leaf nodes of each attack tree. The return on attack for each intermediate node and the root node are then calculated. This calculation is done by randomly varying the vulnerability values of the leaf nodes within the designated range. On observing high return of attack values with the two attack trees developed, counter measures were then implemented. Modified network systems were constructed and the return on attack recalculated. The return on attack (ROA) values for the nodes were observed to decrease, after implementing the counter measures on the network security systems.Keywords: Attack tree, cyber-attacks, cyber-security, return on attack, vulnerability assessment

Downloads

Published

2014-12-12

Issue

Vol. 4 No. 3 (2014)

Section

Research Papers

License

Declaration and Copyright Transfer Form

(to be completed by authors)

 

I/ We, the undersigned author(s) of the submitted manuscript, hereby declare, that the above manuscript which is submitted for publication in the STM Journals(s), is not published already in part or whole (except in the form of abstract) in any journal or magazine for private or public circulation, and, is not under consideration of publication elsewhere.

·         I/We will not withdraw the manuscript after 1 week of submission as I have read the Author Guidelines and will adhere to the guidelines.

·         I/We Author(s ) have niether given nor will give this manuscript elsewhere for publishing after submitting in STM Journal(s).

·         I/ We have read the original version of the manuscript and am/ are responsible for the thought contents embodied in it. The work dealt in the manuscript is my/ our own, and my/ our individual contribution to this work is significant enough to qualify for authorship.

·          I/We also agree to the authorship of the article in the following order:

Author’s name                                    

 

1. ________________

2. ________________

3. ________________

4. _______________

 

We  Author(s) tick this box and would request you to consider it as our signature as we agree to the terms of this Copyright Notice, which will apply to this submission if and when it is published by this journal.