Risk Assessment Methods for Cybersecurity in Nuclear Facilities: Compliance to Regulatory Requirements

As strategic infrastructures, nuclear facilities are considered attractive targets for attackers to commit their malicious intention. At the same time, for efficiency, those infrastructures are increasingly implemented, equipped with, and managed by digitally computerized systems. Attackers, therefore, try to realign their attack scenarios through such cyber systems. It is crucial to understand various existing risk assessment methods for cybersecurity in nuclear facilities to prevent such attacks. Risk assessment is designed to study the nature of the originated attack threats and the consequences implied. This paper studies a series of risk assessment methods implemented for security related to cybersecurity of strategic infrastructures, including nuclear facilities. Extended from cybersecurity, the required concepts in nuclear security cover defense-in-depth, synergy of safety and security, and probabilistic safety/risk assessment. Selecting cybersecurity risk assessment methods should integrate these three essential concepts in their evaluation. This paper highlights the suitable and appropriate risk assessment methods that meet security requirements in the nuclear industry as specified in the national and international regulations. Keywords—Risk assessment; cybersecurity; nuclear facilities; security requirements; regulatory requirements

• Publication year

  2021

• Venue

  International Journal of Advanced Computer Science and Applications

• Publication date

  Unknown publication date

• Fields of study

  Not labeled

• Identifiers
  DOI 10.14569/ijacsa.2021.0120979
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Cybersecurity management for distributed control system: systematic approach

  2021influential reference
• Cybersecurity Assessment Framework for Digital Interface Between Safety and Security at Nuclear Power Plants

  2021cited by this paper
• Review of cybersecurity assessment methods: Applicability perspective

  2021cited by this paper
• Development of a method for estimating security state: Supporting integrated response to cyber-attacks in NPPs

  2021influential reference
• Insight to security paradigm , research trend & statistics in internet of things(IoT)

  2021cited by this paper
• Security Information and Event Management Model Based on Defense-in-Depth Strategy for Vital Digital Assets in Nuclear Facilities

  2021influential reference
• Defining cyber risk

  2021cited by this paper
• The Dynamic Symmetric Four-Key-Generators System for Securing Data Transmission in the Industrial Control System

  2021cited by this paper
• Harmonizing safety and security risk analysis and prevention in cyber-physical systems

  2021cited by this paper
• Pressurizer dynamic model and emulated programmable logic controllers for nuclear power plants cybersecurity investigations

  2021influential reference
• Encouraging Employee Engagement With Cybersecurity: How to Tackle Cyber Fatigue

  2021cited by this paper
• Social Engineering in Cybersecurity: Effect Mechanisms, Human Vulnerabilities and Attack Methods

  2021cited by this paper
• Finite-horizon semi-Markov game for time-sensitive attack response and probabilistic risk assessment in nuclear power plants

  2020cited by this paper
• A novel approach for analyzing the nuclear supply chain cyber-attack surface

  2020cited by this paper
• Cybersecurity vulnerability management: A conceptual ontology and cyber intelligence alert system

  2020cited by this paper
• Security in product lifecycle of IoT devices: A survey

  2020cited by this paper
• Security and privacy issues of physical objects in the IoT: Challenges and opportunities

  2020cited by this paper
• A quantitative assessment framework for cyber-attack scenarios on nuclear power plants using relative difficulty and consequence

  2020influential reference
• A New Cybersecurity Approach for Protecting Cloud Services against DDoS Attacks

  2020cited by this paper
• Development of a quantitative method for identifying fault-prone cyber security controls in NPP digital I&C systems

  2020influential reference
• I-HMM-Based Multidimensional Network Security Risk Assessment

  2020cited by this paper
• Cybersecurity in industrial control systems: Issues, technologies, and challenges

  2019cited by this paper
• Stochastic Counterfactual Risk Analysis for the Vulnerability Assessment of Cyber‐Physical Attacks on Electricity Distribution Infrastructure Networks

  2019cited by this paper
• An overview of methodologies for cybersecurity vulnerability assessments conducted in nuclear power plants

  2019influential reference
• Cybersecurity Risk Assessment for Space Systems

  2019cited by this paper
• A Review of Cybersecurity Risk and Consequences for Critical Infrastructure

  2019cited by this paper
• Development of a quantitative method for evaluating the efficacy of cyber security controls in NPPs based on intrusion tolerant concept

  2018cited by this paper
• Delft University of Technology Analysis of physical and cyber security-related events in the chemical and process industry

  2018cited by this paper
• Combined nuclear safety-security risk analysis methodology development and demonstration through a case study

  2018cited by this paper
• Comparative analysis and patch optimization using the cyber security analytics framework

  2018cited by this paper
• Patching the patchwork: appraising the EU regulatory framework on cyber security breaches

  2018cited by this paper
• The Design and Evaluation of a User-Centric Information Security Risk Assessment and Response Framework

  2018cited by this paper
• Risk Assessment of Critical Energy Infrastructure Considering Physical and Cyber Assets: Methodology and Models

  2018cited by this paper
• Evaluating practitioner cyber-security attack graph configuration preferences

  2018cited by this paper
• Intelligent System for Risk Identification of Cybersecurity Violations in Energy Facility

  2018influential reference
• The future of risk assessment

  2018cited by this paper
• Novel interval type-2 fuzzy logic controller for improving risk assessment model of cyber security

  2018cited by this paper
• Security framework for industrial collaborative robotic cyber-physical systems

  2018cited by this paper
• Improving risk assessment model of cyber security using fuzzy logic inference system

  2018cited by this paper
• A survey on technical threat intelligence in the age of sophisticated cyber attacks

  2018cited by this paper
• Cybersecurity and privacy in standards for smart grids - A comprehensive survey

  2018cited by this paper
• Risk Assessment Method For Insider Threats In Cyber Security : A Review

  2018cited by this paper
• Cyber threat assessment via attack scenario simulation using an integrated adversary and network modeling approach

  2018cited by this paper
• Model-based security engineering for cyber-physical systems: A systematic mapping study

  2017cited by this paper
• Cyber physical systems security: Analysis, challenges and solutions

  2017cited by this paper
• Cyber Security Risk Evaluation of a Nuclear I&C Using BN and ET

  2017influential reference
• Systematic development of scenarios caused by cyber-attack-induced human errors in nuclear power plants

  2017influential reference
• Simulation platform for cyber-security and vulnerability analysis of critical infrastructures

  2017cited by this paper
• Verifying cyber attack properties

  2017cited by this paper
• A framework for incorporating insurance in critical infrastructure cyber risk strategies

  2016cited by this paper
• Overview of cyber-security of industrial control system

  2015cited by this paper
• Critical infrastructure protection: Requirements and challenges for the 21st century

  2015cited by this paper
• Development of a cyber security risk model using Bayesian networks

  2015cited by this paper
• Effects of cyber security knowledge on attack detection

  2015cited by this paper
• A language for describing attacks on cyber-physical systems

  2015cited by this paper
• Development of Cyber-Attack Scenarios for Nuclear Power Plants Using Scenario Graphs

  2015influential reference
• Cyber Scanning: A Comprehensive Survey

  2014cited by this paper
• Risk Assessment System for Verifying the Safeguards Based on the HAZOP Analysis

  2014cited by this paper
• The challenge of cyber attack deterrence

  2010cited by this paper

• Nuclear security measures: A review of selected emerging technologies and strategies

  2024cites this paper