Advanced Persistent Threat Kill Chain for Cyber-Physical Power Systems

Penulis: Presekal, Alfan; Ştefanov, Alexandru; Rajkumar, Vetrivel Subramaniam; Semertzis, Ioannis; Palensky, Peter
Informasi
JurnalIEEE Access
PenerbitInstitute of Electrical and Electronics Engineers Inc.
Volume & EdisiVol. 12
Halaman177746 - 177771
Tahun Publikasi2024
ISSN21693536
Jenis SumberScopus
Sitasi
Scopus: 8
Abstrak
Power systems are undergoing rapid digitalization. This introduces new vulnerabilities and cyber threats in future Cyber-Physical Power Systems (CPPS). Some of the most notable incidents include the cyber attacks on the power grid in Ukraine in 2015, 2016, and 2022, which employed Advanced Persistent Threat (APT) strategies that took several months to reach their objectives and caused power outages. This highlights the urgent need for an in-depth analysis of APTs on CPPS. However, existing frameworks for analyzing cyber attacks, i.e., MITRE ATT&CK ICS and Cyber Kill Chain, have limitations in comprehensively analyzing APTs in CPPS environments. To address this gap, we propose a novel Advanced Cyber-Physical Power System (ACPPS) kill chain framework. The ACPPS kill chain identifies the APT characteristics that are unique to power systems. It defines and examines the cyber-physical APT stages spanning from the initial phases of infiltration to cascading failures and a power system blackout. The proposed ACPPS kill chain is validated with real-world APT attacks on the power grid in Ukraine in 2015 and 2016, and cyber-physical simulations. © 2013 IEEE.
Dokumen & Tautan

© 2025 Universitas Indonesia. Seluruh hak cipta dilindungi.