Study of the Cyber Survivability of Critical Information Infrastructure Objects

Abstract

The article considers an approach to assess the cyber resilience of a critical information infrastructure (CII), which functions under confrontation between two or more parties. Assessment result is the value of the general criterion of CII object ability to perform the target function at a specific point of time. A method to assess the cyber survivability of critical information infrastructure objects of the United Energy System of Ukraine is proposed. The definition of cyber survivability is presented. The management properties that determine the cyber resilience of the system are presented. The model of information confrontation in cyberspace is considered. The properties of the management process are presented: adequacy, optimality, efficiency, resilience, secrecy. Critical infrastructure objects are classified on grounds affecting cyber resilience, in particular, structural organization. The definition of single-link and multi-link object of critical information infrastructure is presented. The classification of multi-link objects of critical information infrastructure based on functional homogeneity is presented: multi-link homogeneous and multi-link inhomogeneous. A generalized indicator of cyber resilience is presented. The dependences of cyber resilience level on the state of critical infrastructure object are obtained and the method and algorithm of their calculation are presented. The diagram of correspondence of the class of CII object state to the level of cyber survivability is presented. The generalized algorithm of a technique to estimate cyber resilience of objects of a critical information infrastructure is described.