Threat Analysis of Cyber Security Exercise for Reservoir Testbed Based on Attack Tree
Sú-Goân Tân, I‐Hsien Liu, Jung-Shian Li · 2022
As operational technology (OT) and information technology (IT) are getting closer in industrial control systems (ICS) nowadays, the security of critical infrastructure (CI) has become an important issue, which may have a great influence on people's livelihood, economy, and even safety. Therefore, governments around the world have conducted a series of cyber security exercises, which is one of the most effective ways to maintain and optimize the security, so as to cultivate the information security capabilities of government agencies and enterprises in the face of cyber attacks. In this paper, we present the framework and situations of the cyber security exercise with two scenarios on our reservoir testbed, and then analyze the threats based on the attack tree model and give the security recommendations to protect the critical infrastructure according to the results of the practical exercise and analysis.