Keynote: Topology Aware Adaptive Security

Abstract

Summary form only given, as follows. The complete presentation was not made available for publication as part of the conference proceedings. Cyber-Physical Systems can be harmed through both cyber-enabled or physically-enabled attacks, particularly ones that exploit the often ignored interplay between the cyber and physical spaces characterizing a system operating environment. Awareness of the topology of the operating environment of systems as well as its dynamics can support adaptive security more effectively. In this talk I propose the use of Bigraphical Reactive Systems to represent the topology of cyber and physical spaces. I describe how to use this representation to reason about the consequences of the evolution of topological configurations on the satisfaction of security requirements. I also illustrate a planning technique to identify an adaptation strategy to be used at runtime, to circumvent, prevent, or mitigate security requirements violations previously identified. Finally I will describe how this approach has been integrated into an existing commercial access control software.