Using a systems-theoretic approach to analyze cyber attacks on cyber-physical systems
Name
987237180-MIT.pdf
Description
Full printable version
Size
11.23 MB
Format
Adobe PDF
Checksum (MD5)
a96fe963a643becd69f4b74440077831
Author(s)
Whyte, David L., 1967-
Advisor(s)
Abel Sanchez.
Date Issued
2017
Publisher
Massachusetts Institute of Technology
Abstract
With increased Internet connectivity and the advent of the industrial Internet, cyber-physical systems are increasingly being targeted by cyber attacks. Unlike, cyber attacks on IT networks, successfully compromising a cyber-physical environment takes considerably more time, motivation, expertise, and operational costs to the adversary. This thesis explores how a systems-theoretic approach, the Systems-Theoretic Accident Model and Processes (STAMP), can be used by an organization to complement intelligence-driven models of intrusion analysis to provide both additional insight and prioritize defensive countermeasures in order to guard against cyber-physical attacks and compromises. Specifically, in this thesis we analyze two real-world use cases of well publicized cyber-physical attacks using traditional intelligence-driven models of intrusion analysis as well as apply the Causal Analysis based on STAMP (CAST) model on one of the use cases. The STAMP/CAST based analysis afforded us deeper insights into the system causal factors that led to the successful compromise. In turn, this allowed for the generation of specific recommendations to safeguard the cyber-physical systems within the network in order to increase the overall organizational security posture. This included a recommendation to modify the existing organizational structure (i.e., the addition of a Security Operations Centre function) such that clearly defined security roles and responsibilities could be effectively implemented thus significantly improving an organization's ability to respond to cyber attacks.
Description
Thesis: S.M. in Engineering and Management, Massachusetts Institute of Technology, School of Engineering, System Design and Management Program, 2017.
Cataloged from PDF version of thesis.
Includes bibliographical references (pages 113-118).
Subjects
Engineering and Management Program.
System Design and Management Program.
MIT Department
Massachusetts Institute of Technology. Engineering and Management Program
System Design and Management Program.
Terms of Use
MIT theses are protected by copyright. They may be viewed, downloaded, or printed from this source but further reproduction or distribution in any format is prohibited without written permission.
Persistent DSpace Link
