{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/81842"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/81842","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Automatic Security Assessment of Control Systems for Critical Cyber -Infrastructures","abstract":"This research attempts to bridge this gap by investigating the automation of security assessment of the static and dynamic properties of critical infrastructures. We describe first-order logic based models of the static elements including power and control devices, services and connectivity, and re-writing logic based models of the dynamic elements such as operating procedure workflows, and the state of a working power grid. We introduce a tool-chain that, with a little manual assistance, can automatically generate these models from specifications, continuously update attributes from online event aggregators, and perform security assessment. Aside from checking whether the system configuration conforms to recommended best-practices for establishing security controls, the assessment also reveals whether the observed anomalies about the system could indicate possible security problems and permits dynamic ranking of alternative recovery procedures to minimize the total risk. Moreover the tool-chain can recommend an optimal selection of security schemes to apply to various vulnerable parts of the Power Grid network to maximize security when faced with a budget constraint. A case study on security hardening the IEEE power system 118-bus test case from a pool of five different best-practice schemes is used to demonstrate the feasibility of the tool chain implementation.","abstract_html":"This research attempts to bridge this gap by investigating the automation of security assessment of the static and dynamic properties of critical infrastructures. We describe first-order logic based models of the static elements including power and control devices, services and connectivity, and re-writing logic based models of the dynamic elements such as operating procedure workflows, and the state of a working power grid. We introduce a tool-chain that, with a little manual assistance, can automatically generate these models from specifications, continuously update attributes from online event aggregators, and perform security assessment. Aside from checking whether the system configuration conforms to recommended best-practices for establishing security controls, the assessment also reveals whether the observed anomalies about the system could indicate possible security problems and permits dynamic ranking of alternative recovery procedures to minimize the total risk. Moreover the tool-chain can recommend an optimal selection of security schemes to apply to various vulnerable parts of the Power Grid network to maximize security when faced with a budget constraint. A case study on security hardening the IEEE power system 118-bus test case from a pool of five different best-practice schemes is used to demonstrate the feasibility of the tool chain implementation.","abstract_has_math":false,"creators":["Anwar, Zahid"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"Ph.D.","degree_level":"Dissertation","degree_discipline":"Computer Science","degree_department":null,"school":null,"contributors":["Campbell, Roy H."],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2015,"date_issued":"2015-09-25T20:20:39Z","date_published":"2015-09-25T20:20:39Z","updated_at":"2026-07-22T22:26:17Z","subjects":["Computer Science"],"languages":["eng"],"rights":[],"rights_urls":[],"identifier_entries":[{"key":"dc:identifier","label":"Identifier","values":["(MiAaPQ)AAI3347273"],"render_values":[{"text":"(MiAaPQ)AAI3347273","href":null,"code":true}]}]},"links":{"outbound_url":"http://hdl.handle.net/2142/81842","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Campbell, Roy H."]},{"key":"dc:creator","label":"Author","values":["Anwar, Zahid"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2015-09-25T20:20:39Z","10000-01-01","2008"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Computer Science"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Ph.D."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Computer Science"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["eng"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/81842","(MiAaPQ)AAI3347273"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["This research attempts to bridge this gap by investigating the automation of security assessment of the static and dynamic properties of critical infrastructures. We describe first-order logic based models of the static elements including power and control devices, services and connectivity, and re-writing logic based models of the dynamic elements such as operating procedure workflows, and the state of a working power grid. We introduce a tool-chain that, with a little manual assistance, can automatically generate these models from specifications, continuously update attributes from online event aggregators, and perform security assessment. Aside from checking whether the system configuration conforms to recommended best-practices for establishing security controls, the assessment also reveals whether the observed anomalies about the system could indicate possible security problems and permits dynamic ranking of alternative recovery procedures to minimize the total risk. Moreover the tool-chain can recommend an optimal selection of security schemes to apply to various vulnerable parts of the Power Grid network to maximize security when faced with a budget constraint. A case study on security hardening the IEEE power system 118-bus test case from a pool of five different best-practice schemes is used to demonstrate the feasibility of the tool chain implementation.","Made available in DSpace on 2015-09-25T20:20:39Z (GMT). No. of bitstreams: 2 license.txt: 4848 bytes, checksum: 96035ab3f5e1c23cc7138a224ce498bd (MD5) 3347273.pdf: 2527016 bytes, checksum: cfa0982a08df2a9359ead18a4327082c (MD5) Previous issue date: 2008","Embargo set by: Seth Robbins for item 83123 Lift date: Forever Reason: Restricted to the U of I community idenfinitely during batch ingest of legacy ETDs","Restricted to the U of I community idenfinitely during batch ingest of legacy ETDs","U of I Only","64 p.","Thesis (Ph.D.)--University of Illinois at Urbana-Champaign, 2008."]},{"key":"dc:title","label":"Title","values":["Automatic Security Assessment of Control Systems for Critical Cyber -Infrastructures"]}]}],"canonical_facts":{"dc:contributor":["Campbell, Roy H."],"dc:creator":["Anwar, Zahid"],"dc:date":["2015-09-25T20:20:39Z","10000-01-01","2008"],"dc:description":["This research attempts to bridge this gap by investigating the automation of security assessment of the static and dynamic properties of critical infrastructures. We describe first-order logic based models of the static elements including power and control devices, services and connectivity, and re-writing logic based models of the dynamic elements such as operating procedure workflows, and the state of a working power grid. We introduce a tool-chain that, with a little manual assistance, can automatically generate these models from specifications, continuously update attributes from online event aggregators, and perform security assessment. Aside from checking whether the system configuration conforms to recommended best-practices for establishing security controls, the assessment also reveals whether the observed anomalies about the system could indicate possible security problems and permits dynamic ranking of alternative recovery procedures to minimize the total risk. Moreover the tool-chain can recommend an optimal selection of security schemes to apply to various vulnerable parts of the Power Grid network to maximize security when faced with a budget constraint. A case study on security hardening the IEEE power system 118-bus test case from a pool of five different best-practice schemes is used to demonstrate the feasibility of the tool chain implementation.","Made available in DSpace on 2015-09-25T20:20:39Z (GMT). No. of bitstreams: 2 license.txt: 4848 bytes, checksum: 96035ab3f5e1c23cc7138a224ce498bd (MD5) 3347273.pdf: 2527016 bytes, checksum: cfa0982a08df2a9359ead18a4327082c (MD5) Previous issue date: 2008","Embargo set by: Seth Robbins for item 83123 Lift date: Forever Reason: Restricted to the U of I community idenfinitely during batch ingest of legacy ETDs","Restricted to the U of I community idenfinitely during batch ingest of legacy ETDs","U of I Only","64 p.","Thesis (Ph.D.)--University of Illinois at Urbana-Champaign, 2008."],"dc:identifier":["http://hdl.handle.net/2142/81842","(MiAaPQ)AAI3347273"],"dc:language":["eng"],"dc:subject":["Computer Science"],"dc:title":["Automatic Security Assessment of Control Systems for Critical Cyber -Infrastructures"],"dc:type":["text"],"thesis:degree_discipline":["Computer Science"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Ph.D."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:26:17Z"}