Ranking of Countermeasures Against Cyberattacks in Cyberphysical Systems of Critical Infrastructure Facilities

The relevance of cybersecurity to critical infrastructure, such as nuclear facilities, cannot be overstated. A distinctive feature of cybersecurity at nuclear facilities is the severe consequences of its violation, and the consequences of cyber-attacks can have catastrophic consequences and even reach national proportions. A study of the field of cybersecurity of nuclear power facilities has shown that the problem of ensuring the security of such facilities has not been fully solved. To solve this problem, we have developed models and algorithms for creating attack vectors for cyber-physical systems of critical infrastructure facilities. The models and algorithms were developed considering the specifics of a particular object and statistical data, distinguishing them from previously proposed vectors of attacks on cyber-physical systems. Generated vectors allow one to analyze possible security impacts and rank countermeasures to these vectors. The countermeasure ranking method uses lists of attack vectors and open vulnerability databases, which makes it possible to rank countermeasures according to various criteria. Such approaches have not previously been used in the specifics of the objects under study.