Faculty of Mechanical Engineering, Wroclaw University of Science and Technology, Wyspianskiego 27, 50-370 Wroclaw, Poland.
Faculty of GeoEngineering Mining and Geology, Wroclaw University of Science and Technology, Wyspianskiego 27, 50-370 Wroclaw, Poland.
Sensors (Basel). 2020 Dec 16;20(24):7210. doi: 10.3390/s20247210.
The rising automation level and development of the Industry 4.0 concept in the mining sector increase the risk of cyber-attacks. As a result, this article focuses on developing a risk analysis method that integrates Kaplan's and Garrick's approach and fuzzy theory. The proposed approach takes into account the level of automation of the operating mining processes. Moreover, it follows five main steps, including identifying the automation level in a selected mine, definition of cyber-attack targets, identification of cyber-attack techniques, definition of cyber-attack consequences, and risk ratio assessment. The proposed risk assessment procedure was performed according to three cyber-attack targets (databases, internal networks, machinery) and seven selected types of cyber-attack techniques. The fuzzy theory is implemented in risk parameter estimation for cyber-attack scenario occurrence in the mining industry. To illustrate the given method's applicability, seven scenarios for three levels of mine automation are analyzed. The proposed method may be used to reveal the current cybersecurity status of the mine. Moreover, it will be a valuable guide for mines in which automation is planned in the near future.
矿业领域自动化水平的提高和工业 4.0 概念的发展增加了网络攻击的风险。因此，本文专注于开发一种风险分析方法，该方法结合了 Kaplan 和 Garrick 的方法和模糊理论。所提出的方法考虑了作业采矿过程的自动化水平。此外，它遵循五个主要步骤，包括确定选定矿山的自动化水平、定义网络攻击目标、识别网络攻击技术、定义网络攻击后果以及风险比评估。根据三种网络攻击目标（数据库、内部网络、机械）和七种选定的网络攻击技术，执行了所提出的风险评估程序。模糊理论用于估计采矿行业网络攻击场景发生的风险参数。为了说明给定方法的适用性，分析了三个自动化级别下的七个场景。该方法可用于揭示矿山当前的网络安全状况。此外，它将是未来计划在自动化方面进行投资的矿山的宝贵指南。
