The RESISTO project has received funding from the European Union’s Horizon 2020 Research and Innovation Programme under Grant Agreement No786409. FEDERICA BATTISTI, MARCO CARLI Roma Tre University MIRJAM FEHLING-KASCHEK, JÖRG FINGER Fraunhofer Institute for High-Speed Dynamics (EMI) SYLVIA BACH University of Wuppertal [email protected] BACKGROUND AND SCOPE OF THE PROJECT TABULAR APPROACH FOR THE RISK AND RESILIENCE ASSESSMENT ::: Extension of ISO 31000: 9-step risk and resilience analysis and management process* ::: Tabular input collection: fast assessment of relevant information 1. System Components step 2 “System Analysis” 2. System Functions step 3 “System Performance Function Identification” 3. Threats step 4 “Disruptions Identification” 4. Improvement Measures step 8 “Selection of Options for Modifying Resilience” ::: Interlinkage of tables: allows to infer correlations, e.g. critical combinations of threats and system functions ::: is an innovative solution for Communication Infrastructure Operators providing (cyber/ physical) situation awareness and enhanced resilience ::: exploits the combined use of risk and resilience analyses, detec- tion and reaction technologies, applications and processes in the physical and cyber domains ::: helps Communication Infra- structure Operators to select the best countermeasures and reactive actions to cyber / physical threats and disruptions ::: Rule-based engine to detect threats defined by the risk and resilience assessment ::: Identification of threats via real-time data analysis and correlation techniques ::: Analysis of the behavior of the RESISTO platform ::: Decision making SYSTEM COMPONENTS IMPROVEMENT MEASURES SYSTEM FUNCTIONS THREATS (HAZARD LIST) 1 CONTEXT ANALYSIS 9 IMPLEMENTATION OF OPTIONS FOR MODIFYING RESILIENCE 2 SYSTEM ANALYSIS 8 SELECTION OF OPTIONS FOR MODIFYING RESILIENCE 3 SYSTEM PERFOR- MANCE FUNCTION IDENTIFICATION 7 RESILIENCE AND COST EVALUATION 4 DISRUPTIONS IDENTIFICATION 5 PRE-ASSESSMENT OF COMBINATIONS OF FUNC- TIONS AND DISRUPTIONS EVENT STREAM PROCESSING MACHINE LEARNING 6 OVERALL RESILIENCE QUANTIFICATION ID Name Description Subsystem Type Quantity ... SC1 SC2 SC3 SC4 ID Name Description Threat Component Action Type ... IM1 IM2 IM3 IM4 ID Name Description Subsystem Linked Components ... SF1 SF2 SF3 SF4 ID Name Description Hazard type Hazard cause Frequency ... T1 T2 T3 T4 T1 T2 T3 T4 SF1 0,5 0,7 1,0 SF2 0,5 1,0 SF3 -0,2 0,3 0,5 1,0 SF4 0,2 0,4 0,6 0,8 SF5 -0,5 0,1 0,8 SF6 -0,9 -0,5 DECISION SUPPORT SYSTEM – CORRELATOR ENGINE SC1 SC2 SC3 SC4 SF1 SF2 SF3 SF4 T1 T2 T3 T4 IM1 IM2 IM3 IM4 *Reference: https://doi.org/10.1007/978-94-024-1123-2_2 RESISTO www.resistoproject.eu