Functional quantitative security risk analysis (QSRA) to assist in protecting critical process infrastructure

van Staalduinen, Mark Adrian; Khan, Faisal; Gadag, Veeresh; Reniers, Genserik

doi:10.1016/J.RESS.2016.08.014

Title

Functional quantitative security risk analysis (QSRA) to assist in protecting critical process infrastructure

Author

van Staalduinen, Mark Adrian

Khan, Faisal

Gadag, Veeresh

Reniers, Genserik

Abstract

This article proposes a quantitative security risk assessment methodology that can assist management in the decision-making process where and when to protect critical assets of a chemical facility. An improvement upon previous work is the approach of conducting concurrent Threat and Vulnerability Assessments, as opposed to a sequential approach. Furthermore, this method introduces a Bow Tie risk model mapped into a Bayesian Network model that allows for various logical relaxation assumptions to be applied. Different uncertainty relaxation approaches such as Noisy-OR and Leaky Noisy-OR and Noisy-AND are tested to improve Threat and Vulnerability likelihood. Finally, integrating threat/vulnerability likelihood with potential losses, the security risk is quantified. The potential security countermeasures are characterized into either decreasing vulnerability or decreasing threat likelihood and are reassessed considering a cost analysis. A theoretical case study is conducted to exemplify the execution and application of the proposed method.

Language

English

Source (journal)

Reliability engineering and system safety. - Barking

Publication

Barking : 2017

ISSN

0951-8320

DOI

10.1016/J.RESS.2016.08.014

Volume/pages

157 (2017) , p. 23-34