Critical Infrastructure Risk Assessment Using Markov Chain Model
DOI:
https://doi.org/10.26636/jtit.2019.130819Keywords:
cybersecurity, Markov chains, networks, NIS Directive, simulationAbstract
The paper presents application of the Markov chain model to assess the risk affecting critical national infrastructure. A method for relating different service states to transition probabilities is shown. Then, a real-life example is thoroughly analyzed. Finally, results of a numerical test concerning this problem are provided.
Downloads
References
[1] “Directive (EU) 2016/1148 of The European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union”, The European Parliament and the Council of the European Union, Official Journal of the European Union, vol. 59, pp. L194/1–L194/30, 2016 [Online]. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016L1148&from=EN.
View in Google Scholar
[2] IEC/ISO 31010 “Risk management – Risk assessment techniques”, International Organization for Standardization, International Electrotechnical Commission, Geneva, 2009 [Online]. Available: https://www.iso.org/obp/ui#iso:std:iec:31010:ed-1:v1:en.
View in Google Scholar
[3] S. Szwaczyk, K. Wrona, and M. Amanowicz, “Applicability of risk analysis methods to risk-aware routing in software-defined networks”, in Proc. Int. Conf. on Milit. Commun. and Inform. Syst. ICMCIS 2018, Warsaw, Poland, 2018.
View in Google Scholar
[4] M. L. Puterman, Markov Decision Processes: Discrete Stochastic Dynamic Programming. Wiley, 2014 (ISBN: 9780471619772).
View in Google Scholar
[5] A. Afful-Dada and T. T. Allen, “Data-driven cyber-vulnerability maintenance policies”, J. of Qual. Technol., vol. 46, pp. 234–250, 2014.
View in Google Scholar
[6] S. Shin, S. Lee, H. Kim, and S. Kim, “Advanced probabilistic approach for network intrusion forecasting and detection”, Expert Syst. With Appl., vol. 40, pp. 315–322, 2013.
View in Google Scholar
[7] N. Ye, Y. Zhang, and C. M. Borror, “Robustness of the Markov-chain model for cyber-attack detection”, IEEE Trans. on Reliabil., vol. 53, pp. 116–123, 2004.
View in Google Scholar
[8] S. Puuska et al., “Nationwide critical infrastructure monitoring using a common operating picture framework”, Int. J. of Critical Infrastruc. Protect., vol. 20, pp. 28–47, 2018.
View in Google Scholar
[9] K. Wrona, S. Oudkerk, S. Szwaczyk, and M. Amanowicz, “Content-based security and protected core networking with software-defined networks”, IEEE Commun. Mag., vol. 54, pp. 138–144, 2016.
View in Google Scholar
Downloads
Submitted
Published
Issue
Section
License
Copyright (c) 2019 Journal of Telecommunications and Information Technology

This work is licensed under a Creative Commons Attribution 4.0 International License.