Features of the risk-based approach to ensure cyber securityof industrial facilities

Bezopasnostʹ Informacionnyh Tehnologij

Vladimir G. Karataev¹  Sergey E. Pareve²  Dmitry I. Pravikov³ 

[1] Center for Scientific and technical information of the Moscow power engineering Institute (MEI);Independent expert;National University of Oil and Gas "Gubkin University";

关键词: cybersecurity, risk assessment, risk-oriented approach, iacs, ics, cyber physical systems, integrated safety and security.;   

DOI  :  10.26583/bit.2020.4.04

来源: DOAJ

【 摘 要 】

We analyze a relationship between the concept of "security" and derived concepts. The objective scientific and practical need for scientific and regulatory consolidation of the term "cybersecurity" is highlighted, and its definition is given. As a result of the analysis of promising approaches to security, the risk-based approach remains relevant. At the same time, expert methods based on possible damage will be considered as methods for assessing cybersecurity risks in the near future. It is concluded that it is necessary to develop tools for automating cybersecurity risk assessment when using engineering calculation methods cyberPHA, Security PHA Review, and others. In academic terms, the most priority area of research remains the problem of modeling and developing models for calculating the probability of occurrence of cybersecurity risks in cyberphysical systems.

【 授权许可】

Unknown