جستجوی مقالات مرتبط با کلیدواژه « Cyber-Attack » در نشریات گروه « پدافند غیرعامل »

Power grid is one of the most important infrastructure of any society on which other infrastructures depend. Studies show that the false data injection cyberattack can cause transmission lines to overload. Usually, the power grid is capable of responding to the natural overloads of transmission lines, but if a cyberattack is accompanied by a targeted physical attack, the overload of transmission lines can become out of control, and consecutive outages can occur in the power grid’s transmission lines. This situation eventually leads to local or nationwide blackouts of the power grid. To confront the overload of transmission lines, the power grid’s operator removes the overloads by taking corrective measures such as using the upward and downward reserve power as well as load shedding. In this paper, we first show how a simultaneous cyber-physical attack can increase the amount of load shedding. Then a model based on game theory is presented to plan the load dispatch of the grid so that the operator can repel the cyber-physical attack with the lowest possible cost using corrective measures. The proposed model is simulated on a 5-bus test network and the results are analyzed.

Nowadays, economic and political development of a society depends on the performance of critical infrastructure such as energy, water, ICT, banking, research and education, transportation, health and treatment, etc. Control and monitoring of critical infrastructure and industrial systems are performed by intelligent network control systems. Major threats to critical infrastructure and industrial control systems are targeted attacks such as cyber ones in which the attacker tailors its strategy for industrial control systems. In order to achieve a secure community, development of protected infrastructure, securing the critical information, and construction of intrinsically secure control systems are absolutely essential. There are a vast number of solutions to security of industrial control systems. The aim of this paper is to classify the solutions into two categories, namely basic strategies and structural strategies. Moreover, some of the common pitfalls and mistakes in the employment of security solutions are addressed.

With the increase in using cyber space in organizations, cyber-attacks specially DDOS attacks by malware and intruders have increased. According to limits that do not allow the terms of a cyber attack to be created in organizations, in addition to providing information about systems at the time of the attack, using simulation provides the possibility of a wide variety of attacks with different sizes. Agent-based modeling and simulation is a method for simulating systems comprised of different agents. In this article, in addition to describing the concepts and features of the agentbased modeling and simulation and DDOS attack, the necessary conditions to examine the various scenarios of distributed interactive and non-interactive cyber attack and defense and evaluation of its performance is provided. The results show that the Defense Distributed Interactive has a better performance than non-interactive mode and the load at the time of the attack is reduced to an average of 15 percent. This reduction of traffic load is due to interaction of defence agents with each other that subsequently increases the defense capability of agents when the attack occurs.

Although the use of computer and information technology in Industrial Control Systems (ICSs) has enhanced their quality, performance and reliability, it has exposed them to cyber security issues. On the other hand, each ICS has a layered structure owing to its variety of functions. Hence, ICSs are susceptible to a wide array of vulnerabilities. Vulnerability detection is an essential step in securing ICSs. After that, different countermeasures should be applied to mitigate the vulnerabilities. However, there exists the lack of a suitable classification of ICS security related vulnerabilities. To address the issue, this paper presents a comprehensive conceptual model for ICS's vulnerabilities based on available vulnerability classification in security standards and guidelines and layered structure of ICS. AS a result, optimal security controls can be applied to reduce or eliminate the vulnerabilities via the conceptual model. Consequently, the proposed conceptual model can help to identify ICS's vulnerabilities and entry points of ICS and cyber attacks can be prevented as far as possible.

Among the various forms of malware, botnets are emerging as the most serious threat against cyber security, they are used for malicious purposes such as sending spam, launching Distributed Denial of Service (DDoS) attacks, Spying and theft of confidential information, and identity theft. Botnets, are remotely controlled by the attackers, and whose members are located in homes, schools, businesses, and governments around the world. The defining characteristic of botnets is the use of command and control channels through which they can be updated and directed. Survey of botnet and its attacks and also botnet detection and defense are related to passive defense in the field of information technology and one of the important aspects of it, is cyber attacks against our country that mainly have properties of botnets. In this paper, We first discuss fundamental concepts of botnets, then command and control techniques are introduced and finally a brief comparison of these techniques is explained. Subsequently, we introduce several related attacks and malicious operation of botnets and then we point out theirr latest targets, and eventually, some cyber attacks, especially those that are against our country infrastructures have been discussed and according to this study, some discussions are also presented about their similarity to botnet attacks, and finally, conclusions are drawn and recommendations are made.