Evaluation of cyber security and modelling of risk propagation with Petri nets

DOI10.3390/SYM9030032MaRDI QIDQ2333477zbMATH OpenOpenAlexFDO

Authors Marcin Szpyrka, Bartosz Jasiul

Publication date 13 November 2019

Published in Symmetry (Search for Journal in Brave)

Copyright license Creative Commons Attribution 4.0 International

Full work available at URL https://doi.org/10.3390/sym9030032

zbMATH Keywords

Petri netspropagation nets: formal methodsrisk assessmentrisk propagation

Mathematics Subject Classification ID

Models and methods for concurrent and distributed computing (process algebras, bisimulation, transition nets, etc.) (68Q85)

Review text

Summary: This article presents a new method of risk propagation among associated elements. On the basis of coloured Petri nets, a new class called propagation nets is defined. This class provides a formal model of a risk propagation. The proposed method allows for model relations between nodes forming the network structure. Additionally, it takes into account the bidirectional relations between components as well as relations between isomorphic, symmetrical components in various branches of the network. This method is agnostic in terms of use in various systems and it can be adapted to the propagation model of any systems' characteristics; however, it is intentionally proposed to assess the risk of critical infrastructures. In this paper, as a proof of concept example, we show the formal model of risk propagation proposed within the project Cyberspace Security Threats Evaluation System of the Republic of Poland. In the article, the idea of the method is presented as well as its use case for evaluation of risk for cyber threats. With the adaptation of Petri nets, it is possible to evaluate the risk for the particular node and assess the impact of this risk for all related nodes including hierarchic relations of components as well as isomorphism of elements.

Recommendations

• Risk propagation model for assessing network information systems
• A new mathematical model for analytical risk assessment and prediction in IT systems
• scientific article; zbMATH DE number 6719503
• scientific article; zbMATH DE number 1983182
• Multivariate dependence among cyber risks based on \(L\)-hop propagation

Cites work

• Analysis of RTCP-nets with reachability graphs
• CADP 2010: a toolbox for the construction and analysis of distributed processes
• Coloured Petri Nets
• Efficient on-the-fly model-checking for regular alternation-free -calculus
• scientific article; zbMATH DE number 2084318 (Why is no real title available?)
• scientific article; zbMATH DE number 1059247 (Why is no real title available?)
• scientific article; zbMATH DE number 1142326 (Why is no real title available?)
• scientific article; zbMATH DE number 910719 (Why is no real title available?)
• scientific article; zbMATH DE number 5585443 (Why is no real title available?)
• NuSMV: A new symbolic model checker
• Semantical Analysis of Modal Logic I Normal Modal Propositional Calculi
• Tools and Methods for RTCP-Nets Modeling and Verification

Cited in

(3)

• Analysis of safeness in a Petri net-based specification of the control part of cyber-physical systems
• A polytope-based approach to measure the impact of events against critical infrastructures
• Risk propagation model for assessing network information systems

Describes a project that uses

Uses Software

• dot
• nuXmv
• NuSMV
• CADP

This page was built for publication: Evaluation of cyber security and modelling of risk propagation with Petri nets

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2333477)