Universiti Teknologi Malaysia Institutional Repository

Risk analysis of water grid systems using threat modeling

Abdul Rahim, Fiza and Jamil, Norziana and Che Cob, Zaihisma and Mohd. Sidek, Lariyah and Sharizan@Sharizal, Nur Izz Insyirah (2022) Risk analysis of water grid systems using threat modeling. In: 11th International Conference on Information and Electronics Engineering, ICIEE 2022, 19 February 2022 - 21 February 2022, Virtual, Online.


Official URL: http://dx.doi.org/10.1088/1742-6596/2261/1/012015


Critical infrastructure systems consist of physical and cyber assets that are essential to the operation of the economy and the government. As one of the most important critical infrastructures worldwide, the water sector has become vulnerable to new risks in the form of cyber threats that can severely impact public health, and are difficult to detect. A water grid system (WGS) plays an important role in guarding the business processes of the water sector against possible threats and risks. Threat modeling can be used to analyze threats to the WGS. It is applied to identify points of access to the assets and devices of the system, classify threats to them, assess the risks posed by them, and suggest mitigation measures. Each threat is classified based on its type according to the STRIDE methodology, and the results of the threat classification can be used to assess the level of risk by using the DREAD methodology. This yields a risk rating for each threat that can be used to devise mitigation measures to minimize the risk posed by it. Through the threat modeling stage, it is known that the high-risk threats on WGSs are tampering with a risk score of 14, denial of service threats with a risk score of 13, and repudiation threats with a risk score of 12. The results of the ranking are used to formulate recommendations in the form of mitigation controls against these threats.

Item Type:Conference or Workshop Item (Paper)
Uncontrolled Keywords:business process, classifieds, critical infrastructure systems, cyber threats
Subjects:T Technology > T Technology (General)
T Technology > TA Engineering (General). Civil engineering (General)
Divisions:Razak School of Engineering and Advanced Technology
ID Code:98881
Deposited By: Yanti Mohd Shah
Deposited On:08 Feb 2023 12:18
Last Modified:08 Feb 2023 12:18

Repository Staff Only: item control page