The Security Risk Analysis Methodology for Smart Network Environments

Adequate and accurate security risk assessment and analysis of any smart network environment is an extremely important task, the results of which allow us to build an adequate protection and evaluate its effectiveness. Nowadays, traditional information security risk management strategy cannot be adequately applied to compose and assure the protection systems for smart network environments, because new infrastructures (e.g. smart homes, smart buildings, smart cities, smart plants, smart hospitals, smart farms, smart transportation) are heterogenous, movable, flexible, highly scalable and reconfigurable with a huge number of peer-to-peer inter-device connections. The paper discusses our approach and experience for security risk analysis at the smart network environment. The character features of the typical smart network environment are revised, the existing methods for risks analysis are reviewed. New requirements for the risk analysis method adequate for the new features of a smart digital landscape are offered. Also, the quantitative risk assessment for the smart network environment is proposed. The proposed method has been experimentally verified on our test bench of a `smart crossroad', the cyberphysical component of the intelligent transportation system (ITS) of a smart city.