English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

We study the problem of defending a Cyber-Physical System (CPS) consisting ofinterdependent components with heterogeneous sensitivity to investments. Inaddition to the optimal allocation of limited security resources, we analyzethe impact of an orthogonal set of defense strategies in the form of networkdesign interventions in the CPS to protect it against the attacker. We firstpropose an algorithm to simplify the CPS attack graph to an equivalent formwhich reduces the computational requirements for characterizing the defender'soptimal security investments. We then evaluate four types of designinterventions in the network in the form of adding nodes in the attack graph,interpreted as introducing additional safeguards, introducing structuralredundancies, introducing functional redundancies, and introducing newfunctionalities. We identify scenarios in which interventions that strengtheninternal components of the CPS may be more beneficial than traditionalapproaches such as perimeter defense. We showcase our proposed approach in twopractical use cases: a remote attack on an industrial CPS and a remote attackon an automotive system. We highlight how our results closely matchrecommendations made by security organizations and discuss the implications ofour findings for CPS design.

The Impact of Network Design Interventions on the Security of Interdependent Systems