Skip to main navigation Skip to search Skip to main content

Statistical Methods for Developing Cybersecurity Response Thresholds for Operational Technology Systems Using Historical Data

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

2 Scopus citations

Abstract

Operational technology (OT) systems face increasing cybersecurity risks from adversarial behavior. A Bayesian network risk model was developed to enhance the comprehension of observable cyber events caused by malicious activity in OT environments. This paper leverages historical data to enable users to provide actionable decision intelligence. Distributions of alert thresholds are defined for the model's primary outputs using open source reporting of 27 cyber attacks affecting OT systems. The user can tune the thresholds relative to these distributions based on their relative risk tolerances. By using this approach, users can tailor the model's interpretation to their response requirements.

Original languageEnglish
Title of host publicationProceedings - 2024 IEEE 6th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications, TPS-ISA 2024
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages549-554
Number of pages6
ISBN (Electronic)9798350386745
ISBN (Print)9798350386745
DOIs
StatePublished - Oct 28 2024
Event6th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications, TPS-ISA 2024 - Washington, United States
Duration: Oct 28 2024Oct 30 2024

Publication series

NameProceedings - 2024 IEEE 6th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications, TPS-ISA 2024

Conference

Conference6th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications, TPS-ISA 2024
Country/TerritoryUnited States
CityWashington
Period10/28/2410/30/24

Keywords

  • Cybersecurity
  • industrial control systems
  • operational technology
  • risk

INL Publication Number

  • INL/JOU-24-80371
  • 184987

Fingerprint

Dive into the research topics of 'Statistical Methods for Developing Cybersecurity Response Thresholds for Operational Technology Systems Using Historical Data'. Together they form a unique fingerprint.

Cite this