A New Way to Generate Automatically the Attacks Scenarios and Combine them with Safety Risks

Tamara Oueidat (1) , Jean-Marie Flaus (1) , François Massé (2)

1 G-SCOP - Laboratoire des sciences pour la conception, l'optimisation et la production
2 INERIS - Institut National de l'Environnement Industriel et des Risques

Industrial systems have undergone a transformation with the introduction of connected systems and digital technology into their control systems, making them open to new cybersecurity threats that affect the safety of the system with the accidental situations. Therefore, analysing these new threats becomes crucial during risk analysis. A significant number of risk analysis approaches have been proposed to treat independently the safety and cybersecurity issues. There is a strong interest in developing risk analysis approaches that combine safety and cybersecurity, particularly in the critical process industry, which poses a significant risk to local populations and the environment. The goal of this article is to present a new developed risk analysis approach that aims to generate the possible attacks scenarios that can occur in industrial systems systematically in new models, and generate these scenarios automatically using a computerized code to simplify the risk analysis process; especially for users who are not experts in the domain of cybersecurity.

Keywords: Cybersecurity; Attack scenarios; Risk analysis; Safety; Industrial systems; meta-models

Domains: Environmental Engineering

Tamara Oueidat, Jean-Marie Flaus, François Massé. A New Way to Generate Automatically the Attacks Scenarios and Combine them with Safety Risks. 32. European Safety and Reliability Conference (ESREL 2022), Aug 2022, Dublin, Ireland. ⟨10.3850/978-981-18-5183-4_R09-04-328-cd⟩. ⟨ineris-03882108⟩