VERCASM-CPS: Vulnerability Analysis and Cyber Risk Assessment for Cyber-Physical Systems

Since Cyber-Physical Systems (CPS) are widely used in critical infrastructures, it is essential to protect their assets from cyber attacks increase the level of security, safety and trustworthiness, prevent failure developments, minimize losses. It necessary analyze CPS configuration an automatic mode detect most vulnerable components reconfigure or replace them promptly. In this paper, we present a methodology determine secure by using public database vulnerabilities identify components. We also integrate risk analysis with Controlled Moving Target Defense, which either replaces re-configures harden it, while being replaced. Our solution helps design more updating existing make resilient against attacks. will compare scores for different configurations show that Windows® 10 build 20H2 operating system than Linux Ubuntu® 20.04, Red Hat® Enterprise® some configurations.