Journal of Applied Mechanical Engineering

Development of a framework aiming to support development of cyber incident response exercises for critical infrastructures

Joint Event on 2^nd International Conference on Advanced Robotics, Mechatronics and Artificial Intelligence & 3^rd International Conference on Design & Production Engineering

December 03-04, 2018 | Valencia, Spain

Hidekazu Hirai, Yuitaka Ota, Yoshihiro Hashimoto and Ichiro Koshijima

Nagoya Institute of Technology, Japan

Posters & Accepted Abstracts: J Appl Mech Eng

Abstract:

In recent years, cyber-attacks targeting critical infrastructures (CIs) are increasing. Cyber-attacks targeting CIs are a severe threat that causes explosion accidents and hazardous material leaks. Ukrainian electric power company experienced massive blackouts due to cyber-attacks in 2015 and 2016. For that reason, it is urgent for companies holding CIs to improve cybersecurity. The important things for improving cybersecurity are: preparing cyber incident response plan and; training cyber incident response plan. An effective method for realizing both is a cyber-incident response exercise (CIRE). CIRE is a security measure that realizes both by simulating a cyber incident response in a real pseudo-environment. Until now, the authors developed the CIRE using the fictitious company, and the CIRE was used by more than 50 companies. However, when the organization structure and system structure of the fictitious company assumed in our CIRE are significantly different from companies to which the exercise students belong, we could not give the exercise students a sufficient exercise effect. The most effective CIRE for each company is the CIRE developed based on each company's environment (organizational structure, system structure, etc.). However, it is incredibly costly for a company to develop the CIRE independently by the company or have them outsourced to external vendors for development. Therefore, there is a need for a mechanism that enables each company to develop CIRE for in-house at low cost and easily. In this research, we introduce a framework which each company can develop CIRE for in-house easily.

Biography :

E-mail: cjr17067@nitech.jp