Digital Library of the European Council for Modelling and Simulation

Title:	Concrete vs. Symbolic Simulation To Assess Cyber-Resilience Of Control Systems
Authors:	Giuseppina Murino, Armando Tacchella
Published in:	(2018). ECMS 2018 Proceedings Edited by: Lars Nolle, Alexandra Burger, Christoph Tholen, Jens Werner, Jens Wellhausen European Council for Modeling and Simulation. doi: 10.7148/2018-0005 ISSN: 2522-2422 (ONLINE) ISSN: 2522-2414 (PRINT) ISSN: 2522-2430 (CD-ROM) 32nd European Conference on Modelling and Simulation, Wilhelmshaven, Germany, May 22^nd – May 26^5h, 2018
Citation format:	Giuseppina Murino, Armando Tacchella (2018). Concrete vs. Symbolic Simulation To Assess Cyber-Resilience Of Control Systems, ECMS 2018 Proceedings Edited by: Lars Nolle, Alexandra Burger, Christoph Tholen, Jens Werner, Jens Wellhausen European Council for Modeling and Simulation. doi: 10.7148/2018-0433
DOI:	https://doi.org/10.7148/2018-0433
Abstract:	State-of-the-art industrial control systems are complex implements featuring different spatial and temporal scales among components, multiple and distinct behavioral modal-ities, context-dependent and human-in-the-loop interaction patterns. Most control systems offer entry-points for mali-cious users to disrupt their functionality severely, which is unacceptable when they are part of the national critical in-frastructure. Cyber-resilience, i.e., the ability of a system to sustain — possibly malicious — alterations while main-taining an acceptable functionality, is recognized as one of the keys to understand how much damage can be brought to a system and its surrounding environment in case of a suc-cessful cyber-attack. In this paper we compare methods to assess resilience considering both concrete simulation and symbolic simulation. Our ultimate goal is to provide main-tainers and other stakeholders with a dynamic and quanti-tative measure of cyber-resilience. Here we present some results on a case study related to waste-water treatment, in order to provide initial evidence that concrete and symbolic simulation can be used in a complementary way to analyze the security of industrial control systems.
Full text: