Author:
Rahim Fiza Abdul,Jamil Norziana,Cob Zaihisma Che,Sidek Lariyah Mohd,Sharizan@Sharizal Nur Izz Insyirah
Abstract
Abstract
Critical infrastructure systems consist of physical and cyber assets that are essential to the operation of the economy and the government. As one of the most important critical infrastructures worldwide, the water sector has become vulnerable to new risks in the form of cyber threats that can severely impact public health, and are difficult to detect. A water grid system (WGS) plays an important role in guarding the business processes of the water sector against possible threats and risks. Threat modeling can be used to analyze threats to the WGS. It is applied to identify points of access to the assets and devices of the system, classify threats to them, assess the risks posed by them, and suggest mitigation measures. Each threat is classified based on its type according to the STRIDE methodology, and the results of the threat classification can be used to assess the level of risk by using the DREAD methodology. This yields a risk rating for each threat that can be used to devise mitigation measures to minimize the risk posed by it. Through the threat modeling stage, it is known that the high-risk threats on WGSs are tampering with a risk score of 14, denial of service threats with a risk score of 13, and repudiation threats with a risk score of 12. The results of the ranking are used to formulate recommendations in the form of mitigation controls against these threats.
Subject
General Physics and Astronomy
Reference20 articles.
1. A Review of Cybersecurity Incidents in the Water Sector;Hassanzadeh;J Environ Eng.,2020
2. Florida Water Treatment Plant Hit With Cyber Attack - Industrial Defender [Internet];Kardon;Ind. Def.,2021
Cited by
3 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献