RISK DISCLOSURE AGAINST ATTACK ON CRITICAL INFRASTRUCTURES

Simulating Attack Plans Against ICT Infrastructures

Goal-oriented, rational threat agents attack a complex ICT infrastructure by composing elementary attacks against distinct components into an attack chain or attack plan. To compute statistics on the success probabilities of these plans, we have designed and implemented Haruspex, a tool that implements a Monte Carlo method by simulating the agent plans. A proper set of Haruspex experiments retu...

Risk Analysis of Intentional Electromagnetic Interference on Critical Infrastructures

Our modern society depends on the functioning and interplay of a wealth of infrastructures. Practically all of these infrastructures are in some form or another, dependent on electrical and electronic systems. The majority of modern infrastructure is dependent on electric power and controlled by Supervisory Control and Data Acquisition (SCADA) systems. Electronic systems are sensitive to electr...

An Undirected Attack Against Critical Infrastructure

Impacts of the 2001 World Trade Center Attack on New York City Critical Infrastructures

This study investigates impacts of the 2001 World Trade Center attack on critical infrastructure systems in the New York City metropolitan area. Of particular interest are the physical or logical connections—also known as interdependencies—among these systems, and the impacts of the attack on them. This study extends knowledge about the behavior of complex and interdependent infrastructures sys...

Two-Sided Statistical Disclosure Attack

We introduce a new traffic analysis attack: the Two-sided Statistical Disclosure Attack, that tries to uncover the receivers of messages sent through an anonymizing network supporting anonymous replies. We provide an abstract model of an anonymity system with users that reply to messages. Based on this model, we propose a linear approximation describing the likely receivers of sent messages. Us...