Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Integrated metamodel for security analysis
KTH, School of Electrical Engineering (EES), Electric power and energy systems.ORCID iD: 0000-0003-1464-6163
KTH, School of Electrical Engineering (EES), Electric power and energy systems.ORCID iD: 0000-0001-7386-7471
KTH, School of Electrical Engineering (EES), Electric power and energy systems.
KTH, School of Electrical Engineering (EES), Electric power and energy systems.ORCID iD: 0000-0002-3293-1681
2015 (English)In: 2015 48TH HAWAII INTERNATIONAL CONFERENCE ON SYSTEM SCIENCES (HICSS), IEEE Computer Society, 2015, p. 5192-5200Conference paper, Published paper (Refereed)
Resource type
Text
Abstract [en]

This paper proposes a metamodel for analyzing security aspects of enterprise architecture by combining analysis of cybersecurity with analysis of interoperability and availability. The metamodel extends an existing attack graph based metamodel for cybersecurity modeling and evaluation, (PCySeMoL)-Cy-2, and incorporates several new elements and evaluation rules. The approach improves security analysis by combining two ways of evaluating reachability: one which considers ordinary user activity and another, which considers technically advanced techniques for penetration and attack. It is thus permitting to evaluate security in interoperability terms by revealing attack possibilities of legitimate users. Combined with data import from various sources, like an enterprise architecture data repository, the instantiations of the proposed metamodel allow for a more holistic overview of the threats to the architecture than the previous version. Additional granularity is added to the analysis with the reachability need concept and by enabling the consideration of unavailable and unreliable systems.

Place, publisher, year, edition, pages
IEEE Computer Society, 2015. p. 5192-5200
Series
Proceedings of the Annual Hawaii International Conference on System Sciences, ISSN 1060-3425
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:kth:diva-181009DOI: 10.1109/HICSS.2015.613ISI: 000366264105039Scopus ID: 2-s2.0-84944219720ISBN: 978-1-4799-7367-5 (print)OAI: oai:DiVA.org:kth-181009DiVA, id: diva2:897785
Conference
48th Annual Hawaii International Conference on System Sciences (HICSS), JAN 05-08, 2015, Kauai, HI
Note

QC 20160126

Available from: 2016-01-26 Created: 2016-01-26 Last updated: 2018-09-22Bibliographically approved
In thesis
1. Improving IT Architecture Modeling Through Automation: Cyber Security Analysis of Smart Grids
Open this publication in new window or tab >>Improving IT Architecture Modeling Through Automation: Cyber Security Analysis of Smart Grids
2018 (English)Doctoral thesis, comprehensive summary (Other academic)
Abstract [en]

Contemporary organizations depend on IT to reach their goals but the organizations are constantly adapting to changing market conditions and these changes need to be reflected in the IT architecture. Modeling is often used to manage complex architectures allowing to abstract details and focus on the most important aspects. Metamodels are central to modeling and used as a mechanism for modeling different phenomena and describing evolving designs such as IT architectures. However, it can be difficult to model IT architecture especially in large organizations due to the amount and diversity of systems, software, data, et cetera. Previous studies have found problems with metamodels and the support modeling tools provide to the users. The topics mentioned by numerous authors are lacking cyber security analysis capabilities and the support for automated model creation using enterprise data. These two topics are studied in this thesis with the focus on smart grids. 

The contribution of this thesis is to offer support for IT architecture modeling processes with the following propositions that are described in four papers. The contribution includes a metamodel extension for analyzing insider threats and reachability (Paper A), a framework for automatic modeling (Paper B), a framework for improving semantic accuracy and granularity matching in automatic modeling (Paper C) and a reference model for cyber security analysis of smart grid load balancing (Paper D).

Abstract [sv]

Idag är många verksamheter beroende av IT för att nå sina mål. Organisationer anpassar sig dock ständigt till förändrade marknadsförhållanden och dessa förändringar måste återspeglas i IT-arkitekturen. Modellering används ofta för att hantera komplexa system, då det möjliggör abstraktion av detaljer och fokus på de viktigaste delarna av systemet. Metamodeller är viktiga för modellering och används som ett verktyg för att modellera fenomen för olika IT-arkitekturer. Att modellera IT-arkitekturer kan dock vara svårt, särskilt i stora organisationer med många olika system, program, data osv. Tidigare forskning har funnit problem med metamodeller och verktygsstöd. Ämnen som nämns av många författare är problemen med hotanalyskapacitet och stöd för automatiserad modelluppbyggnad från företagsdata. Dessa två ämnen studeras i denna avhandling med fokus på smarta elnät.

Bidraget i denna avhandling är att erbjuda stöd för IT-arkitekturmodelleringsprocesser med följande förslag som beskrivs i fyra papper. Bidraget innefattar en utvidgad metamodell för att analysera interoperabilitet och tillgänglighet avseende cybersäkerhet (artikel A), ett ramverk för automatisk modellering (artikel B), ett ramverk för förbättring av semantisk noggrannhet och granularitetsmatchning i automatisk modellering (artikel C) och en referensmodell för analys av cybersäkerhet vid lastbalansering av smarta elnät (artikel D).

Place, publisher, year, edition, pages
Stockholm: KTH Royal Institute of Technology, 2018. p. 44
Series
TRITA-EECS-AVL ; 2018:63
National Category
Other Electrical Engineering, Electronic Engineering, Information Engineering
Research subject
Electrical Engineering
Identifiers
urn:nbn:se:kth:diva-235347 (URN)978-91-7729-931-8 (ISBN)
Public defence
2018-10-15, F3, Lindstedtsvägen 26, Stockholm, 15:00 (English)
Opponent
Supervisors
Note

QC 20180924

Available from: 2018-09-24 Created: 2018-09-22 Last updated: 2018-10-10Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records BETA

Välja, MargusKorman, MatusJohnson, Pontus

Search in DiVA

By author/editor
Välja, MargusKorman, MatusShahzad, KhurramJohnson, Pontus
By organisation
Electric power and energy systems
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 82 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf