Treffer: Enhancing the security of reconfigurable cyber-physical supply chains: reconstructing vulnerable attack paths using AND/OR/QUORUM graphs.

Cyber-physical supply chains (CPSCs) integrate physical assets with cyber technologies to form connected and intelligent ecosystems. The increasing frequency and sophistication of cyber-attacks on CPSCs have made defence against these threats increasingly complex. A key strategy in this direction is to identify vulnerable attack paths to detect the most endangered components in the CPSC, thereby allowing the development of more effective and attack-resistant countermeasures. We begin by presenting generalised attack graphs with AND, OR, and QUORUM nodes (so-called AOQ graphs), using them to model and counter attacks on CPSC. Then, we develop an efficient path-extraction method that exploits supply chains' structural dynamics and reconfigurability to find vulnerable attack paths in AOQ graphs. Finally, we reconstruct the most vulnerable paths by hardening components and deploying an innovative honeypot technology – this is a decoy system that imitates assets to distract attackers. Unlike known methods, the proposed methodology automatically extracts the most vulnerable attack paths from the AOQ graphs in polynomial time without human intervention and provides proactive defence against intrusions. This approach has been tested on experimental benchmark problems and a real post-harvest supply chain and has demonstrated its superiority over previously known pathfinding algorithms. [ABSTRACT FROM AUTHOR]

Copyright of International Journal of Production Research is the property of Taylor & Francis Ltd and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Volltext ist im Gastzugang nicht verfügbar. Login für vollen Zugriff.