Dr. Mike Robinson is the Director of the Old Dominion University Center for Innovative Transportation Solutions and the lead transportation researcher at ODU’s Virginia Modeling, Analysis, and Simulation Center. Mike came to ODU following a career as a nuclear submarine officer in the U.S. Navy. His research interests have focused on emergency transportation response, decision-making, and cyber security. He received an MS Degree in Physics from the Navy Post-Graduate School in Monterey, CA and holds a Ph.D. in Modeling and Simulation from ODU.
This paper is a result of a cyber risk assessment undertaken with the goal of increasing the cyber awareness of operators of infrastructure, managers, and political leadership. The meaning of cyber has, in our opinion, been aggregated to a bumper sticker label so generic, it means very little of anything to anyone trying to understand cyber risk. Senior executives and political leaders have a very limited understanding of industrial control systems (ICS) and the crucial role ICS provide to public/private infrastructure, industry, and military systems. Therefore, to accomplish our
purpose, we conducted a cyber-risk study focusing on a bridge tunnel ICS – a scenario of concern. In this paper we present the analytic approach, discuss our model, simulation, and analyze the results using a notational data and generic system description. As a result of this study we were able to discuss the importance of controls systems with senior leaders. We were able to demystify what we mean by “cyber” showing that it is possible through simulation to inject the effects of cyber scenarios of concern into simulations to assess impact. There was also an unintended benefit: During a system audit, ICS operators with decades of engineering experiences began to realize that the ICS is vulnerable to willful intrusion. More of these studies are needed to raise awareness.