The Procrustes Testbed is a suite of advanced tools and methodologies for the assessment of cyber-physical risks in water related utilities. It comprises the following components:
An Agent Based Modelling (ABM) tool that simulates the agents – CP attackers (e.g. hackers, saboteurs), following various behavioural rules, to decide which are their targets and how they will attack them. The agents – CP attackers focus on the critical nodes of water CIs (e.g. storage tanks, pumping stations, PLCs). The ABM provides an assessment of the likelihood of a successful attack on each type of infrastructure based on the characteristics of the utility, the level of protection that is provided and the level of sophistication of the attack.
Given an attack scenario, the Sensitivity Analysis tool is able to identify those parameters having the most severe impact on the operation of the infrastructure and the utility service. During the Sensitivity Analysis procedure, a series of simulations are executed with slightly different initial values of the main attack parameters each time. The results are listed and compared based on predefined KPIs.
The Stress-Testing Platform enables users to link and simulate the combined cyber and physical system (explicitly modelling all interactions). Users are able to specify if the STP will focus on certain asset categories (Sensors, PLC, Actuators etc.) or on certain attack sophistication levels (simple, moderate, sophisticated). The STP allows the user to assess the protection level and vulnerability of an infrastructure as a whole, under normal conditions, under cyber-physical attacks and after incorporating risk reduction measures.
A Risk Reduction Knowledge Base will assist authorized users in identifying appropriate measures and mitigating identified vulnerabilities. The impact of each measure can be evaluated by comparing simulation results of scenarios with applied measures against the business-as-usual scenario.
Finally, the Cyber-Physical Resilience Sensor Placement Optimization Tool (CPR-SPOT) is able to assess the most suitable position for quality sensors within the system based on multiple performance metrics of the system against cyber-physical threats.