Mission Impact Assessment in Power Grids

A high number of low-level alerts are reported by information security systems . This justifies the interest in gathering and aggregating data from various sources. Subsequently, we propose an approach that correlates security events to detect upcoming cyber threats and determining the impact of these cyber threats. The proposed mission impact assessment (MIA) approach allow event correlation, the recognition of mission threatening events and computing the impact of this event. An offline component that develops a network dependency model by learning a state machine from network traffic captures. Additionally, a dependency model of the power grid is modeled to allow the analysis of cyber-physical impacts. This allows the analysis of how cyber events might impact the ongoing mission on an operational level.