AWARE-RG: Abstraction Aware Explanation of Resiliency Graphs for Cyber Physical Systems
AWARE-RG explains role-bounded cyber-physical resiliency paths using ATT&CK for ICS and plan repair.
AWARE-RG is a human-in-the-loop framework for explaining resiliency paths in cyber-physical systems to analysts who have incomplete, role-specific views. Its abstraction structure is derived with Formal Concept Analysis over MITRE ATT&CK for ICS tactics, ordered by the ICS Cyber Kill Chain. For valid attack-fault queries, plan repair and backward means-end analysis identify missing dependencies, explain why a physical hazard is reachable, and suggest defenses. Invalid queries are localized to the first failing abstraction level, with confirmed blocking conditions reported as hardening pointers.
- AWARE-RG explains CPS resiliency paths within an analyst's need-to-know view.
- Abstractions use Formal Concept Analysis over ATT&CK for ICS.
- Valid queries explain reachable physical hazards and suggest defenses.
- Invalid queries identify the first blocking abstraction and hardening pointers.
From the original article
1 min read at arxiv.orgUnderstanding the security posture of cyber physical systems (CPS) requires reasoning across both information technology (IT) and operational technology (OT). However, a security analyst often holds an incomplete, role-specific view of the underlying system which has most likely resulted from their knowledge limited by a need-to-know framework.
By Shadaab Kawnain Bashir · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.