arrow
Return

Advanced attack graph framework for operational technology: scalable modeling, validation, and risk mitigation

delete2025-08-19
delete0
PRE
AI
A
Alessio Viticchié
A
Alberto Salvatore Colletto
G
Giulio Sunder
C
Cataldo Basile
A
Alessandro Aliberti *
DOI:10.1007/s10586-025-05288-ydelete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Operational Technology (OT) systems are essential for industrial processes but increasingly face cyber threats due to their integration with IT networks. This paper introduces an advanced framework for modeling, analyzing, and mitigating OT cyber risks using logical attack graphs with OT-specific modeling, including protocols, device hierarchies, and multi-layer dependencies. To enhance scalability, a novel graph pruning algorithm eliminates 81–98% of redundant nodes, reducing complexity while preserving critical attack paths. Additionally, an automated validation pipeline bridges theoretical modeling and real-world applicability by refining attack graphs and providing actionable mitigation insights. The framework’s modular and adaptable design ensures it remains effective in evolving OT environments, addressing emerging threats with high resilience. Validation in realistic OT scenarios confirms its scalability and effectiveness, making it a practical, extensible cybersecurity solution for protecting industrial infrastructures and critical processes from advanced cyber risks.
Keywords:
Cybersecurity
Industrial internet connectivity
Operational technology
Attack graphs
Vulnerability assessment

Journal

C
Cluster Computing
IF:
0
Papers:
691
Citations:
1

Organization

D
Department of Control and Computer Engineering
Scholars:
71
Papers: 33
Citations: 0