Publication: Risk Analysis of Water Grid Systems Using Threat Modeling
Date
2022
Authors
Rahim F.A.
Jamil N.
Cob Z.C.
Sidek L.M.
Sharizan N.I.I.
Journal Title
Journal ISSN
Volume Title
Publisher
Institute of Physics
Abstract
Critical infrastructure systems consist of physical and cyber assets that are essential to the operation of the economy and the government. As one of the most important critical infrastructures worldwide, the water sector has become vulnerable to new risks in the form of cyber threats that can severely impact public health, and are difficult to detect. A water grid system (WGS) plays an important role in guarding the business processes of the water sector against possible threats and risks. Threat modeling can be used to analyze threats to the WGS. It is applied to identify points of access to the assets and devices of the system, classify threats to them, assess the risks posed by them, and suggest mitigation measures. Each threat is classified based on its type according to the STRIDE methodology, and the results of the threat classification can be used to assess the level of risk by using the DREAD methodology. This yields a risk rating for each threat that can be used to devise mitigation measures to minimize the risk posed by it. Through the threat modeling stage, it is known that the high-risk threats on WGSs are tampering with a risk score of 14, denial of service threats with a risk score of 13, and repudiation threats with a risk score of 12. The results of the ranking are used to formulate recommendations in the form of mitigation controls against these threats. � Published under licence by IOP Publishing Ltd.
Description
Denial-of-service attack; Health risks; Public works; Risk analysis; Risk assessment; Business Process; Classifieds; Critical infrastructure systems; Cyber threats; Grid systems; Mitigation measures; Public IS; Risk score; Threat modeling; Water sector; Critical infrastructures