ASSESSING RISK OF CYBER THREATS USING CISIAPRO SIMULATOR

Dependencies and, eventually, interdependencies among Critical Infras- tructures are difficult to identify and to model, because their effects appears in few situations with unpredictable consequences. Adding cy- ber attacks in this context makes analysis even more complex. Inte- grating cyber attacks and interdependencies consequences requires the knowledge of both fields with a common abstraction level. CISIApro is a Critical Infrastructure simulator, and it was born for eval- uating consequences of faults and failures on interdependent infrastruc- tures. In this paper, CISIApro implements the effects of cyber attacks on physical equipment and on infrastructure services. The case study highlights the main functionality of the simulator, with a complex scenario where several events may happen: first an ARP spoofing attack, and then a worm infection. The scenario considers three interconnected infrastructures: a medium voltage power grid, controlled by a SCADA control center over a SCADA network, interconnected with a general-purpose telecommunication network. The simulation results display the output of CISIApro in event of cyber attacks. The simulation demonstrates the help of CISIApro output in a decision making process for electric operators: specifically, the choice between different re-configurations.