Deriving Cyber Security Risks from Human and Organizational Factors – A Socio-technical Approach

Autor: Thomas Richard McEvoy, Stewart Kowalski

Publikováno v: Complex Systems Informatics and Modeling Quarterly; No 18 (2019): Complex Systems Informatics and Modeling Quarterly; 47-64
Complex Systems Informatics and Modeling Quarterly, Vol 0, Iss 18, Pp 47-64 (2019)

Cyber security risks are socio-technical in nature. They result not just from technical vulnerabilities but also, more fundamentally, from the degradation of working practices over time – which move an organization across the boundary of secure pra

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::d7a90bc311f5e9e86eb6e3bcfc89c493
https://csimq-journals.rtu.lv/article/view/csimq.2019-18.03

Algebraic Analysis of Attack Impacts and Countermeasures in Critical Infrastructures

Autor: Thomas Richard McEvoy, Stephen D. Wolthusen

Publikováno v: Critical Information Infrastructures Security ISBN: 9783642414848
CRITIS

Critical infrastructure systems are distributed environments in which the mixture of technologies and interdependencies between physical and logical components lead to complex interactions. Calculating the possible impacts of attacks and the success

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::a1ea2b9e66493b43ae80702c82c7ee5c
https://doi.org/10.1007/978-3-642-41485-5_15

Agent Interaction and State Determination in SCADA Systems

Autor: Stephen D. Wolthusen, Thomas Richard McEvoy

Publikováno v: Critical Infrastructure Protection VI ISBN: 9783642357633
Critical Infrastructure Protection
IFIP Advances in Information and Communication Technology
6th International Conference on Critical Infrastructure Protection (ICCIP)
6th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2012, Washington, DC, United States. pp.99-109, ⟨10.1007/978-3-642-35764-0_8⟩

Part 2: CONTROL SYSTEMS SECURITY; International audience; Defensive actions in critical infrastructure environments will increasingly require automated agents to manage the complex, dynamic interactions that occur between operators and malicious acto

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::439380b03914fc2c22100bd125ec3c13
https://doi.org/10.1007/978-3-642-35764-0_8

A Plant-Wide Industrial Process Control Security Problem

Autor: Stephen D. Wolthusen, Thomas Richard McEvoy

Publikováno v: Critical Infrastructure Protection V ISBN: 9783642248634
Critical Infrastructure Protection

Industrial control systems are a vital part of the critical infrastructure. The potentially large impact of a failure makes them attractive targets for adversaries. Unfortunately, simplistic approaches to intrusion detection using protocol analysis o

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::14de4d3a18f8905289f863dad596cae3
https://doi.org/10.1007/978-3-642-24864-1_4

Host-Based Security Sensor Integrity in Multiprocessing Environments

Autor: Thomas Richard McEvoy, Stephen D. Wolthusen

Publikováno v: Information Security, Practice and Experience ISBN: 9783642128264
ISPEC

Attack and intrusion detection on host systems is both a last line of defence and provides substantially more detail than other sensor types. However, any host-based sensor is likely to be a primary target for adversaries to ensure concealment and ev

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::e248645bfb18f9563b0eb28958f86f08
https://doi.org/10.1007/978-3-642-12827-1_11