DEVELOPMENT OF CYBER-PHYSICAL SYSTEM SECURITY MANAGEMENT PROCESS MODEL
Elena S. Grozmani, Peter the Great St. Petersburg Polytechnic University, St. Petersburg, Russia, grozmani.el@yandex.ru
Sergey V. Petrov, Joint Stock Company «Research Institute «Rubin», St. Petersburg, Russia, c.petrov13@gmail.com
Abstract
Cyber-physical systems (CPS) combine general-purpose information and telecommunication systems and industrial networks and devices (controllers), forming a heterogeneous hierarchical distributed information technology computing environment designed for control and monitoring of technological processes. FSCs are being actively implemented in the industrial, urban and household spheres, allowing for more efficient use of resources, as well as transferring management and feedback processes to a new level. CPS are formed as a result of the aggregation of several heterogeneous information and telecommunication systems, which makes them susceptible to the destructive factors of the digital environment – cyber attacks. The peculiarities of the construction and functioning of the CPS require a new approach to defining attack surfaces and modelling threats. This is due to the fact that the «traditional» goals of attackers — the availability, integrity and confidentiality of information processed in the system — are not the only ones. In addition, the value of the information itself can be extremely low. At the same time, control and feedback processes play a decisive role in a cyber-physical system. Their stability directly affects the ability of the FSC to perform target functions, as well as the physical safety of technological facilities, personnel and consumers. Depending on the degree of criticality of the technological processes of the real world, which are controlled by the cyber-physical system, the violation of these flows inside it can lead to serious consequences, such as large material damage or a threat to the life and health of people. The severity of the identified threats is confirmed by the constantly growing number of attacks on CPS and the consequences, including potential ones, to which these attacks lead. In addition, it should be noted that in the context of the rapid development and improvement of programmable control devices (Programmable Logic Controller (PLC)), making them more accessible in the mass market segment, as well as the proliferation of high-speed wireless data transmission networks, the concept of a smart home is gaining wider application. This approach implies the integration of PLCs that interact with each other and the control centre via multi-service broadband wireless networks into the domestic environment. Thus, the concept of a smart home is based on the implementation of FSCs in places of permanent residence of people with the transfer of automatic control functions of climatic equipment, lighting, household appliances, physical elements of protection against intrusions to them. At the same time, it is extremely important to ensure the information security of the CFS. To ensure the required level of their security, it is necessary to effectively solve the problems of managing the process of ensuring their information security. The article proposes an approach to the development of a model for the information security management process of a CFS operating in a smart home.
Keywords: cyber physical systems, information security, management, model, management decision.
References
1. O.M. Lepeshkin, M.O. Lepeshkin, V.G. Burlov (2016). Synthesis of a model of the process of control of technical systems based on the theory of radicals. In the book: Neurocomputers and Their Applications. Abstracts of reports. Edited by A. I. Galushkin, A. V. Chechkin, L. S. Kuravsky, S. L. Artemenkov, G. A. Yuriev, P. A. Marmalyuk, A. V. Gorbatov, S. D. Kulik. P. 18-B.
2. V.G. Burlov, N.N. Popov (2017). Management of the application of the space geoinformation system in the interests of ensuring the environmental safety of the region. Advances in the Astronautical Sciences, pp. 751-760.
3. A.O. Zhukov, V.G. Burlov, U.A. Pestun (2017). On the issue of strategic planning for the development of knowledge-intensive enterprises. In the collection: Strategic planning and enterprise development. Materials of the Eighteenth All-Russian Symposium. Edited by G. B. Kleiner, pp. 935-939.
4. P.K. Anokhin (1979). System mechanisms of higher nervous activity. Moscow: Science. 453 p.
5. E.P. Istomin, V.M. Abramov, V.G. Burlov, A.G. Sokolov, A.A. Fokicheva. (2018). Risk management method in parametric geosystems. 18th International Multidisciplinary Scientific GeoConferences SGEM 2018 Conference proceedings, pp. 377-384.
6. V.G. Burlov, N.N. Popov, Kh.A. Garcia Escalona (2018). Management of the process of using the space geoinformation system in the interests of ensuring the ecological safety of the region. Scientific notes of the Russian State Hydrometeorological University. No. 50, pp. 118-129.
7. M. Li, W. Gu, W. Chen, Y. He, Y. Wu, Y. Zhang (2018). Smart Home: Architecture, Technologies and Systems, 8th International Congress of Information and Communication Technology (ICICT-2018), vol. 131, pp. 393-400.
8. J. Robles, T. Kim (2010). Application, systems and methods in smart home technology. A review. Int. J. Adv. Sci. Technol, 2010, pp. 37-48.
9. C. Yang, E. Mistretta, S. Chaychian & J. Siau (2017). Smart home system network architecture.
Information about authors:
Elena S. Grozmani, Peter the Great St. Petersburg Polytechnic University, postgraduate student, St. Petersburg, Russia
Sergey V. Petrov, Joint Stock Company «Research Institute «Rubin», Head of Certification Testing Department, St. Petersburg, Russia

