Attack Graph Modeling For Nuclear Power Plant

Nuclear power plants are subject to cyber-attacks due to existing vulnerabilities in the various hierarchical structure plant components and their communication backbones. In this paper, a pressurized water nuclear power plant control system is analyzed, formally described, and modeled using Architecture Analysis & Design Language (AADL), identifying the plant architecture, connections, vulnerabilities, assets, possible attack instances as well as their pre-and post-conditions. The generated plant model is then verified against a security property using JKind model checker integrated tool. The union of the generated attack sequences resulting in overall plant disruption (i.e., Attack Graph) is graphically presented using C# language in Microsoft Visual Studio.