PARAMETRIC ANALYSIS OF INTEGRATED OPERATIONAL AND INFORMATION TECHNOLOGY SYSTEMS
A system and method for analyzing integrated operational technology and information technology systems with sufficient granularity to predict key elements of their composite behavior. The system and method involve creating high-fidelity models of the operational technology and information technology systems using one or more cyber-physical graphs, performing parametric analyses of the models to identify key components, scaling the parametric analyses of the models to analyze the key components at a greater level of granularity, and iteratively improving the models via ongoing search and testing against observed data from the real-world systems.
1 . A system for parametric analysis of integrated operational and information technology systems, comprising:
a computing system comprising a memory and a processor, the computing system being connected to a network; and
a graph subsystem comprising instructions that, when operating on the processor, causes the computing system to:
create a model of a system comprising information and operational technology elements;
wherein the model comprises a graph comprising with nodes representing entities and edges representing relationships;
an analyzer subsystem comprising instructions that, when operating on the processor, causes the computing device to:
perform iterative analyses of parameters of the model; and
determine a response of the model to each analysis;
an optimizer subsystem comprising instructions that, when operating on the processor, causes the computing device to:
determine dimensions for running the model;
determine parameters, perturbations, and cycles for simulations; and
determine thresholds for triggering new simulations.
2 . The system of claim 1 , wherein the model further comprises a computational graph with nodes representing transformations and edges representing communications, representing workflows within the model.
3 . The system of claim 1 , wherein the optimizer subsystem causes the computing device to run simulations on the model based on parameters and produce simulation data.
4 . The system of claim 3 , wherein the optimizer subsystem further causes the computing device to:
receive operational data from the system;
compare the operational data to the simulation data; and
adjust the model to reduce differences between the operational and simulation data.
5 . The system of claim 4 , wherein the simulation data are used to predict behaviors of the system.
6 . The system of claim 5 , wherein the predicted behaviors are used to determine potential unauthorized control of the system.
7 . The system of claim 5 , wherein the predicted behaviors are used to adjust the system's operation.
8 . The system of claim 1 , wherein additional state information of the system is captured as time-series data and referenced in the graph.
9 . A computer-implemented method for parametric analysis of integrated operational technology systems and information technology systems, the computer-implemented method comprising:
creating a model of a system comprising information and operational technology elements;
wherein the model comprises a graph with nodes representing entities and edges representing relationships;
performing iterative analyses of parameters of the model;
determining responses of the model to each analysis;
determining dimensions for running the model;
determining parameters, perturbations, and cycles for simulations; and
determining thresholds for triggering new simulations.
10 . The computer-implemented method of claim 9 , wherein the model further comprises a computational graph with nodes representing transformations and edges representing communications, representing workflows within the model.
11 . The computer-implemented method of claim 9 , comprising running simulations on the model based on parameters and producing simulation data.
12 . The computer-implemented method of claim 11 , comprising the further steps of:
receiving operational data from the system;
comparing the operational data to the simulation data; and
adjusting the model to reduce differences between the operational and the simulation data.
13 . The computer-implemented method of claim 12 , wherein the simulation data are used to predict behaviors of the system.
14 . The computer-implemented method of claim 13 , wherein the predicted behaviors are used to determine potential unauthorized control of the system.
15 . The computer-implemented method of claim 13 , wherein the predicted behaviors are used to adjust the system's operation.
16 . The computer-implemented method of claim 9 , wherein additional state information is captured as time-series data and referenced in the graph.
17 . A system for parametric analysis of integrated operational and information technology systems, comprising one or more computers with executable instructions that, when executed, cause the system to:
create a model of a system comprising information and operational technology elements;
wherein the model comprises a graph with nodes representing entities and edges representing relationships;
perform iterative analyses of parameters of the model;
determine responses of the model to each analysis;
determine dimensions for running the model;
determine parameters, perturbations, and cycles for simulations; and
determine thresholds for triggering new simulations.
18 . The system of claim 17 , wherein the model further comprises a computational graph with nodes representing transformations and edges representing communications, representing workflows within the model.
19 . The system of claim 17 , comprises running simulations on the model based on parameters and producing simulation data.
20 . The system of claim 19 , comprising the further steps of:
receive operational data from the system;
compare the operational data to the simulation data; and
adjust the model to reduce differences between the operational and the simulation data.
21 . The system of claim 20 , wherein the simulation data are used to predict behaviors of the system.
22 . The system of claim 21 , wherein the predicted behaviors are used to determine potential unauthorized control of the system.
23 . The system of claim 21 , wherein the predicted behaviors are used to adjust the system's operation.
24 . The system of claim 17 , wherein additional state information of the system is captured as time-series data and referenced in the graph.
25 . Non-transitory, computer-readable storage media having computer-executable instructions embodied thereon that, when executed by one or more processors of a computing system employing parametric analysis for integrated operational and information technology systems, cause the computing system to:
create a model of a system comprising information and operational technology elements;
wherein the model comprises a graph with nodes representing entities and edges representing relationships;
perform iterative analyses of parameters of the model;
determine responses of the model to each analysis;
determine dimensions for running the model;
determine parameters, perturbations, and cycles for simulations; and
determine thresholds for triggering new simulations.
26 . The non-transitory, computer-readable storage media of claim 25 , wherein the model further comprises a computational graph with nodes representing transformations and edges representing communications, representing workflows within the model.
27 . The non-transitory, computer-readable storage media of claim 25 , comprises running simulations on the model based on parameters and producing simulation data.
28 . The non-transitory, computer-readable storage media of claim 27 , comprising the further steps of:
receive operational data from the system;
compare the operational data to the simulation data; and
adjust the model to reduce differences between the operational and the simulation data.
29 . The non-transitory, computer-readable storage media of claim 28 , wherein the simulation data are used to predict behaviors of the system.
30 . The non-transitory, computer-readable storage media of claim 29 , wherein the predicted behaviors are used to determine potential unauthorized control of the system.
31 . The non-transitory, computer-readable storage media of claim 29 , wherein the predicted behaviors are used to adjust the system's operation.
32 . The non-transitory, computer-readable storage media of claim 25 , wherein additional state information of the system is captured as time-series data and referenced in the graph.