Search NASA⌕ Search
Home/Archive/DOE OSTI

DOE OSTI · 1136813

Quantifying Availability in SCADA Environments Using the Cyber Security Metric MFC

Aissa, Anis Ben·Rabai, Latifa Ben Arfa·Abercrombie, Robert K·Sheldon, Frederick T·Mili, Ali
View original source ↗Read source document ↗Export metadata ↓

Abstract

Supervisory Control and Data Acquisition (SCADA) systems are distributed networks dispersed over large geographic areas that aim to monitor and control industrial processes from remote areas and/or a centralized location. They are used in the management of critical infrastructures such as electric power generation, transmission and distribution, water and sewage, manufacturing/industrial manufacturing as well as oil and gas production. The availability of SCADA systems is tantamount to assuring safety, security and profitability. SCADA systems are the backbone of the national cyber-physical critical infrastructure. Herein, we explore the definition and quantification of an econometric measure of availability, as it applies to SCADA systems; our metric is a specialization of the generic measure of mean failure cost.

Explore related subjects

AvailabilityDependabilityECONOMICSMean Failure CostMeasurementMFCReliabilitySCADASecuritySecurity MeasuresSecurity RequirementsThreats

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Aissa, Anis Ben, Rabai, Latifa Ben Arfa, Abercrombie, Robert K, Sheldon, Frederick T, Mili, Ali. 2014-01-01. Quantifying Availability in SCADA Environments Using the Cyber Security Metric MFC. https://www.osti.gov/biblio/1136813

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related reports

DOE OSTI2021

Water Atlas Features Database

Water availability was mapped across the United States and considers multiple sources of fresh water including fresh surface and groundwater, wastewater and brackish groundwater. This dataset includes cost estimates to access, treat and convey each unique source of water. This submission contains a zip file with the Water Atlas Features Database (as an ArcGIS geodatabase).

Availability↗
DOE OSTI2015

Security Analysis of Smart Grid Cyber Physical Infrastructures Using Modeling and Game Theoretic Simulation

Cyber physical computing infrastructures typically consist of a number of sites are interconnected. Its operation critically depends both on cyber components and physical components. Both types of components are subject to attacks of different kinds and frequencies, which must be accounted for the initial provisioning and subsequent operation of the infrastructure via information security analysis. Information security analysis can be performed using game theory implemented in dynamic Agent Based Game Theoretic (ABGT) simulations. Such simulations can be verified with the results from game theory analysis and further used to explore larger scale, real world scenarios involving multiple attackers, defenders, and information assets. We concentrated our analysis on the electric sector failure scenarios and impact analyses by the NESCOR Working Group Study, From the Section 5 electric sector representative failure scenarios; we extracted the four generic failure scenarios and grouped them into three specific threat categories (confidentiality, integrity, and availability) to the system. These specific failure scenarios serve as a demonstration of our simulation. The analysis using our ABGT simulation demonstrates how to model the electric sector functional domain using a set of rationalized game theoretic rules decomposed from the failure scenarios in terms of how those scenarios might impact the cyber physical infrastructure network with respect to CIA.

Availability↗
DOE OSTI2014

Quantifying the Impact of Unavailability in Cyber-Physical Environments

The Supervisory Control and Data Acquisition (SCADA) system discussed in this work manages a distributed control network for the Tunisian Electric & Gas Utility. The network is dispersed over a large geographic area that monitors and controls the flow of electricity/gas from both remote and centralized locations. The availability of the SCADA system in this context is critical to ensuring the uninterrupted delivery of energy, including safety, security, continuity of operations and revenue. Such SCADA systems are the backbone of national critical cyber-physical infrastructures. Herein, we propose adapting the Mean Failure Cost (MFC) metric for quantifying the cost of unavailability. This new metric combines the classic availability formulation with MFC. The resulting metric, so-called Econometric Availability (EA), offers a computational basis to evaluate a system in terms of the gain/loss ($/hour of operation) that affects each stakeholder due to unavailability.

Availability↗