PROGETTI H2020 COCKPITCI E ATENA: EFFETTI DI ATTACCHI CYBER

Transcript

1 PROGETTI H2020 COCKPITCI E ATENA: EFFETTI DI ATTACCHI CYBER SULLE INFRASTRUTTURE ELETTRICHE PROF. STEFANO PANZIERI Dipartimento di Ingegneria Università Roma TRE Via Vito Volterra, 62, Roma PANZIERI@UNIROMA3.IT MCIPLAB

2 SOMMARIO Infrastrutture Critiche Complesso vs. Complicato Nuova Analisi del Rischio Modellare le interdipendenze per comprendere gli effetti a cascata Esempi Progetti H2020

3 INFRASTRUTTURE CRITICHE O SERVIZI ESSENZIALI

4 COMPLICATEZZA NON È COMPLESSITÀ Dobbiamo trasformare la complicatezza in complessità (Luciano Floridi) Affrontare la complessità stimola la nascita di nuovi strumenti BOEING 777: primo volo nel workgroups, 2200 workstations CATIA AIRBUS: creato nel Workstations Computervision and CADDS5 software Software sviluppato: Messaging Diary management Task scheduling Task allocation Task reporting Database interface

5 UNA NUOVA RISK ANALYSIS A H E T C TA I V

6 MODELLARE LE INTERDIPENDENZE CON CISIAPRO

7 MHR MODELING WITHIN CISIAPRO

8 ANCHE LA PROPAGAZIONE SPAZIALE È UTILE Event definition (Spatial Epicenter) Spatial Variables declaration (e. g. x, y, z) m = magnitute d = distance = f Spatial Variables σ = propagation = f d, m, t σt 0 σt 1 σt 2 σt n n Steps t 0 t 1 t 2 t n Active Evolution

9 DECISION SUPPORT SYSTEM CISIApro Engine SCADA System DECISION SUPPORT SYSTEM On-Line Data Detection MONITORING Cyber Detection System CISIApro DB HMI FISR RECONFIGURATION CISIApro Design

10 DAL MODELLO DEL GRID AL DECISION SUPPORT SYSTEM #5 GENERATORS #14 BUS DSS Rete Elettrica Reale Modello in CISIApro

11 COCKPITCI PROJECT: CYBER CONTEXT ELECTRIC GRID MITM MAN IN THE MIDDLE INFECTION ATTACK Victim Node Network Node Victim Node Network Node SCADA NETWORK TELECOMMUNICATION NETWORK TOT. SIMULATION TIME: 40 SECONDS MITM INFECTION 1 TO 10 SEC 11 TO 40 SEC

12 ATENA PROJECT: SMART GRID RECONFIGURATION Power Dist. Water Dist. SCADA

13 URANIUM PROJECT: DISASTER RECOVERY [SERVICES] CIVIL PROTECTIO [SERVICES] ROAD SYSTEM TELCO [HOLISTIC] CITIES POWER GRID GAS DISTRIBUTION [SERVICE] SCADA CONTROL ROOM (GAS) SCADA CONTROL ROOM (POWER GRID) WG

14 BUSINESS CONTINUITY MANAGEMENT ORGANIZATIONAL MANAGEMENT STRUCTURE BUILDING MODEL POWER DISTRIBUTION NATURAL DISASTERS WATER DISTRIBUTION WEATHER Climate Changes ORGANIZATION Assets, Organizational Structure, Building Services, Networks Human Resources, etc. TELCO HIGHWAY SYSTEM OIL & GAS DISTRIBUTION PERFORMANCE INDEXES DEPARTMENT BOARD OF TRUSTEES CEO TOP MANAGER WORKFORCE PROPAGATED RESOURCES TRANSPORTATION SYSTEMS SOCIO-ECONOMIC BEHAVIOURS SOCIO-POLITICAL BEHAVIOURS INTERNATIONAL AGREEMENTS CIO TOP MANAGER COO TOP MANAGER CFO TOP MANAGER CTO TOP MANAGER MANAGERS MANAGERS MANAGERS MANAGERS HR SECTOR MANAGER SALES & MARKETING SECTOR MANAGER INTERNAL SOURCE OF RISK EXTERNAL SOURCE OF RISK INTERNATIONAL ACT OF WAR & TERRORISM SENIORS SENIORS SENIORS SENIORS SENIORS SENIORS JUNIORS JUNIORS JUNIORS JUNIORS JUNIORS JUNIORS

15 EMERGENCY MANAGEMENT

16 PUBLICATIONS: EU PROJECTS ONLINE IDENTIFICATION OF FAILURE AND ATTACK ON INTERDEPENDENT CRITICAL INFRASTRUCTURES CYBER-SECURITY ON SCADA: RISK PREDICTION, ANALYSIS AND REACTION TOOLS FOR CRITICAL INFRASTRUCTURES UNIFIED RISK ASSESSMENT NEGOTIATION VIA INTEROPERABILITY USING MULTI-SENSORY DATA ADVANCED TOOLS TO ASSESS AND MITIGATE THE CRITICALITY OF ICT COMPONENTS AND THEIR DEPENDENCIES OVER CRITICAL INFRASTRUCTURES RESILIENCE ENHANCEMENT AND RISK CONTROL PLATFORM FOR COMMUNICATION INFRASTRUCTURE OPERATORS

17 THANKS FOR YOUR ATTENTION MCIPLAB