On designing automatic reaction strategy for critical infrastructure SCADA system

The huge amount of information managed by Critical Infrastructure (CI) argues for the support of SCADA systems which behave as very complex and sophisticated tools. These latter support CI operators in monitoring and governing the system security by elaborating the operational policies amongst the architecture components. In [1] and [2] we have exploited enterprise architecture management tool to construct an integrated SCADA metamodel dedicated to these components' artefacts and structured according to (1) three layers of abstraction, namely: Organization, Application, and Technical layer and (2) two semantically consistent types of policies: the Permissive Policy and the Cognitive Policy. The results of the SCADA modelling and policy engineering approach constitute, as illustrated through the CockpitCI project case study, a global analytical tool for the SCADA operators which may rely on a rational and unified component security based architecture to continuously monitor and manipulate the policy attributes acknowledging their impact on the whole CI system. In this poster, we illustrate how the metamodel for SCADA components is used together with the method for policy scheme identification to support automatic reaction strategy.