Model Based Risk Assessment and Risk Mitigation Framework for Cyber-Physical Systems

Cyber-Physical Systems (CPS) form the nation's critical infrastructure. The present-day CPS incorporate advanced communication technologies for remote monitoring and control. However, CPS often have infrastructures that have a very long lifespan. Consequently, the incorporation of cybersecurity in legacy systems is a challenge. This has led to an increased attack surface for CPS. Identifying risks and implementing security techniques during the design phase can help improve the security posture of CPS. This paper presents a holistic model-based risk assessment and mitigation framework for CPS to achieve security by design. Such a framework can also be applied to legacy systems to mitigate the risks.