Cyber vulnerability assessment tool threat assessment heuristie
A Cyber Vulnerability Assessment Tool (CVAST) and CVAST Threat Assessment Heuristic (CVAST THRASH) capable of automated modeling of cyber physical systems, assessment of the nature of cyber risks thereto, and output of such cyber risk assessments are provided.
1. An automated method for conducting a cyber risk assessment of a Cyber Physical System (CPS), comprising the steps of:
extracting and encoding information from a plurality of knowledge domains using a CPS Information Extraction System;
modeling relationships across the plurality of domains using a CPS Semantic Model;
storing the information in a Cyber-Risk Information Database in accordance with a plurality of ontologies provided by the CPS Semantic Model;
plotting an attack graph using an Attack Graph Algorithm employing an electrical circuit analogy;
evaluating a chain of cyber threat impacts using a Chain of Impacts Algorithm;
evaluating the criticality of any of a system, a subsystem, or a component, using a CPS Criticality Algorithm;
evaluating the cyber risk at the component and system levels in a CPS using a Threat Assessment Heuristic (THRASH) Cyber Risk Algorithm; and
outputting the cyber risk assessment.
2. The method of claim 1 , wherein the relationships modeled by the CPS Semantic Model derive from the domains comprising the engineering, information technology, cybersecurity, and mission domains.
3. The method of claim 2 , wherein the CPS Semantic Model provides a plurality of ontologies linking components and systems of a CPS across the domains.
4. The method of claim 1 , wherein the CPS is a Naval Control System (NCS).
5. The method of claim 4 , wherein the CPS Semantic Model provides ontologies that support automated reasoning and computational analysis, in the form of semantic decompositions of CPS elements, the CPS elements comprising at least one of:
missions of Naval vessel platform vessels;
a Universal Naval Task List;
NCS systems for submarines, surface ships, and airframes;
lower level functioning systems; and
physical security systems.
6. The method of claim 5 , wherein the CPS Semantic Model further comprises ontologies that support automated reasoning and computational analysis, in the form of semantic decompositions of types of adversaries which target NCS, and motivations of adversaries who target NCS.
7. The method of claim 1 , wherein the CPS is one operating in the group consisting of power grids, manufacturing plants, nuclear power plants, utility companies, and aviation systems.
8. The method of claim 1 , wherein the THRASH Cyber Risk Algorithm produces the risk assessment by analysis of risk scores regarding threat, vulnerability, and impact of a component or a system of the CPS.
9. The method of claim 8 , wherein the risk assessment is a heat map.
10. A risk assessment produced by the method of claim 1 .