Real Time Asset Monitoring and Risk Management of Critical Infrastructures

摘要

Critical Infrastructures (CIs) are recognized to be of high societal and economic importance globally. Due to population impact, attacks against their components can cause serious damage and performance degradation putting at risk wide geographical regions. Therefore it is imperative, to protect them against any type of cyber - physical risks by protecting CIs against threat consequences, blocking the threats to take place and predicting threat occurrence and eliminating its roots. In this paper we present a decision tool (RTRM)that imprints a methodology, capable of alerting the infrastructure security operators of the existence of new threats, of threat actions and even of possible existence of threats. Monitored data is captured and fed into a Data Stream Management System. This data set is applied on a behavior analyzer that translates the raw data events into possibleCI asset behaviors, which are added into semantics ontology through an incremental model generator. The updated models are then injected into threat classification and estimation modules and the new security map of the system is displayed on the RTRM that alerts the security CI team of any new threat situation. All these are real time processes-actions.