Risk based resilient network design

This paper presents a risk-based approach to resilient network design. The basic design problem considered is that given a working network and a fixed budget, how best to allocate the budget for deploying a survivability technique in different parts of the network based on managing the risk. The term risk measures two related quantities: the likelihood of failure or attack, and the amount of damage caused by the failure or attack. Various designs with different risk-based design objectives are considered, for example, minimizing the expected damage, minimizing the maximum damage, and minimizing a measure of the variability of damage that could occur in the network. A design methodology for the proposed risk-based survivable network design approach is presented within an optimization model framework. Numerical results and analysis illustrating the different risk based designs and the tradeoffs among the schemes are presented. © 2011 Springer Science+Business Media, LLC

Disaster-Resilient Control Plane Design and Mapping in Software-Defined Networks

Communication networks, such as core optical networks, heavily depend on their physical infrastructure, and hence they are vulnerable to man-made disasters, such as Electromagnetic Pulse (EMP) or Weapons of Mass Destruction (WMD) attacks, as well as to natural disasters. Large-scale disasters may cause huge data loss and connectivity disruption in these networks. As our dependence on network services increases, the need for novel survivability methods to mitigate the effects of disasters on communication networks becomes a major concern. Software-Defined Networking (SDN), by centralizing control logic and separating it from physical equipment, facilitates network programmability and opens up new ways to design disaster-resilient networks. On the other hand, to fully exploit the potential of SDN, along with data-plane survivability, we also need to design the control plane to be resilient enough to survive network failures caused by disasters. Several distributed SDN controller architectures have been proposed to mitigate the risks of overload and failure, but they are optimized for limited faults without addressing the extent of large-scale disaster failures. For disaster resiliency of the control plane, we propose to design it as a virtual network, which can be solved using Virtual Network Mapping techniques. We select appropriate mapping of the controllers over the physical network such that the connectivity among the controllers (controller-to-controller) and between the switches to the controllers (switch-to-controllers) is not compromised by physical infrastructure failures caused by disasters. We formally model this disaster-aware control-plane design and mapping problem, and demonstrate a significant reduction in the disruption of controller-to-controller and switch-to-controller communication channels using our approach.Comment: 6 page

Game Theory Meets Network Security: A Tutorial at ACM CCS

The increasingly pervasive connectivity of today's information systems brings up new challenges to security. Traditional security has accomplished a long way toward protecting well-defined goals such as confidentiality, integrity, availability, and authenticity. However, with the growing sophistication of the attacks and the complexity of the system, the protection using traditional methods could be cost-prohibitive. A new perspective and a new theoretical foundation are needed to understand security from a strategic and decision-making perspective. Game theory provides a natural framework to capture the adversarial and defensive interactions between an attacker and a defender. It provides a quantitative assessment of security, prediction of security outcomes, and a mechanism design tool that can enable security-by-design and reverse the attacker's advantage. This tutorial provides an overview of diverse methodologies from game theory that includes games of incomplete information, dynamic games, mechanism design theory to offer a modern theoretic underpinning of a science of cybersecurity. The tutorial will also discuss open problems and research challenges that the CCS community can address and contribute with an objective to build a multidisciplinary bridge between cybersecurity, economics, game and decision theory

Multi-Layer Cyber-Physical Security and Resilience for Smart Grid

The smart grid is a large-scale complex system that integrates communication technologies with the physical layer operation of the energy systems. Security and resilience mechanisms by design are important to provide guarantee operations for the system. This chapter provides a layered perspective of the smart grid security and discusses game and decision theory as a tool to model the interactions among system components and the interaction between attackers and the system. We discuss game-theoretic applications and challenges in the design of cross-layer robust and resilient controller, secure network routing protocol at the data communication and networking layers, and the challenges of the information security at the management layer of the grid. The chapter will discuss the future directions of using game-theoretic tools in addressing multi-layer security issues in the smart grid.Comment: 16 page

Disaster Resilience Education and Research Roadmap for Europe 2030 : ANDROID Report

A disaster resilience education and research roadmap for Europe 2030 has been launched. This roadmap represents an important output of the ANDROID disaster resilience network, bringing together existing literature in the field, as well as the results of various analysis and study projects undertaken by project partners.The roadmap sets out five key challenges and opportunities in moving from 2015 to 2030 and aimed at addressing the challenges of the recently announced Sendai Framework for Disaster Risk Reduction 2015-2030. This roadmap was developed as part of the ANDROID Disaster Resilience Network, led by Professor Richard Haigh of the Global Disaster Resilience Centre (www.hud.ac.uk/gdrc ) at the School of Art, Design and Architecture at the University of Huddersfield, UK. The ANDROID consortium of applied, human, social and natural scientists, supported by international organisations and a stakeholder board, worked together to map the field in disaster resilience education, pool their results and findings, develop interdisciplinary explanations, develop capacity, move forward innovative education agendas, discuss methods, and inform policy development. Further information on ANDROID Disaster Resilience network is available at: http://www.disaster-resilience.netAn ANDROID Disaster Resilience Network ReportANDROI

ANDROID: An Inter-disciplinary Academic Network that Promotes Co-operation and Innovation among European Higher Education to Increase Society's Resilience to Disasters

Using knowledge, innovation and education to build a culture of safety and resilience at all levels is one of five priorities for action (PFA) that were identified in the Hyogo Framework for Action (HFA). The responsibility for such capacity building resides largely with educators such as higher education institutes, but the complexity of resilience poses a number of challenges. This paper describes ANDROID, an EU funded international partnership of higher education institutes and key actors in disaster resilience, which has been formed to develop innovative European education. ANDROID is based on an inter-disciplinary consortium of partners that comprises scientists from applied, human, social and natural disciplines. ANDROID set out to achieve this aim through a series of inter-linked projects, identified as work packages and led by a sub-group of international partners. This paper describes these projects and highlights key outputs achieved to date: an inter-disciplinary doctoral school; a survey capturing and sharing innovative approaches to inter-disciplinary working; a survey of European education to map teaching and research programmes in disaster resilience; a survey analysing the capacity of European public administrators to address disaster risk; emerging research and teaching concerns in disaster resilience; and, open educational resources