Real Time Asset Monitoring and Risk Management of Critical Infrastructures
Vasilis N. Tsoulkas, D. Kostopoulos, George Leventakis · 2014
Critical Infrastructures (CIs) are recognized to be of high societal and economic importance globally. Due to population impact, attacks against their components can cause serious damage and performance degradation, putting wide geographical regions at risk. Therefore, it is imperative, to protect them against any type of cyber or physical risks by protecting CIs against threat consequences, blocking the threats from taking place, and predicting threat occurrence and eliminating its roots. In this paper, we present a decision tool (RTRM) that imprints a methodology capable of alerting the infrastructure security operators of the existence of new threats, of threat actions, and even of the possible existence of threats. Monitored data is captured and fed into a Data Stream Management System. This data set is applied on a behavior analyzer that translates the raw data events into possible CI asset behaviors, which are added into semantics ontology through an incremental model generator. The updated models are then injected into threat classification and estimation modules and the new security map of the system is displayed on the RTRM that alerts the security CI team of any new threat situation. All these are real time processes and actions.