An Automated Adaptive Security Framework for Cyber-Physical Systems

Elias Seid, Oliver Popov, Fredrik Blix

2024

Abstract

The paper promotes the notion that any security solution for cyber-physical systems (CPS) should be adaptive and based on the type of attacks and their frequency. Namely, the solution should monitor its environment continuously to defend itself from a cyber-attack by modifying its defensive mechanism. Moreover, the research provides analyses of situations where the environment changes dynamically over time, requiring the designated adaptation to contemplate and respond adequately to these changes. In particular, it explores applying adaptive model predictive control concepts derived from control theory to develop specific adaptive security solutions. These systems can make decisions by forecasting their future performance for various modes or options of adaptation. Using quantitative information, the software then selects the adaptations that minimise the cost associated with security failures. This is highly significant considering that CPS are engineered systems built from and depend upon the seamless integration of computational algorithms and physical components. Moreover, security breaches are rising, and CPS are challenged by catastrophic damage, resulting in billions of losses making many of today’s solutions obsolete. While security agents issue new sets of vulnerability indicators and patches to address security breaches, these changes are continuous processes ad infinitum. A case study on a medical emergency response system illustrates the essential and salient futures of the proposed adaptive security framework for CPS.

Paper Citation

in Harvard Style

Seid E., Popov O. and Blix F. (2024). An Automated Adaptive Security Framework for Cyber-Physical Systems. In Proceedings of the 10th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP; ISBN 978-989-758-683-5, SciTePress, pages 242-253. DOI: 10.5220/0012469100003648

in Bibtex Style

@conference{icissp24,
author={Elias Seid and Oliver Popov and Fredrik Blix},
title={An Automated Adaptive Security Framework for Cyber-Physical Systems},
booktitle={Proceedings of the 10th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP},
year={2024},
pages={242-253},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012469100003648},
isbn={978-989-758-683-5},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 10th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP
TI - An Automated Adaptive Security Framework for Cyber-Physical Systems
SN - 978-989-758-683-5
AU - Seid E.
AU - Popov O.
AU - Blix F.
PY - 2024
SP - 242
EP - 253
DO - 10.5220/0012469100003648
PB - SciTePress