Elektronika 2009-11.pdf - Instytut Systemów Elektronicznych

As is it shown in Fig. 7, the decision-aid will analyse the
ontology and generate the facts and rules. Actually, the ontology
instances will be mapped to facts and the SWRL rules will
be mapped to engine’s rules.
In that manner, the tool will be facilitated with information
that will allow to:
• measure dynamically (the value will not be hard coded into
ontology) the vulnerability likelihood,
• dynamically rank the vulnerabilities,
• inform the operator what may cause the fault in SCADA
system,
• what element of the network needs some attention and
safeguards.
By defining the additional (tool build-in) rules there will be
possibility to realize the customized features of the aid tool:
• proposing the action plans with information how to minimize
the likelihood of the vulnerability,
• apply some appropriate countermeasures to minimize the
probability of most likely attack,
• evaluate the SCADA system condition based on standards.
Conclusions
In this paper ontology-based approach for description of
SCADA systems vulnerabilities has been presented. Functionalities
of ontology applied to knowledge representation for
security and protection of critical infrastructures have been
shown. Our solution has been developed within research in
the INSPIRE Project that aims to increase security and protection
through infrastructure resilience. Presented ontology
approach will be basis for Decision - aid tool which is a part of
INSPIRE security framework.
The research leading to these results has received funding from the
European Community’s Seventh Framework Programme (FP7/2007-
2013) under grant agreement no. 225553 (INSPIRE Project).
References
[1] Critical infrastructure: Understanding Its Component Parts, Vulnerabilities,
Operating Risks, and Interdependencies, Tyson
Macaulay, August 2008.
[2] Lewis T. G.: Critical Infrastructure Protection in Homeland Security:
Defending a Networked Nation, Wiley-Interscience,
2006.
[3] Ustawa z dnia 26 kwietnia 2007 r. o zarządzaniu kryzysowym,
Opracowano na podstawie: Dz.U. z 2007 r. nr 89, poz. 590.
[4] Homeland Security Presidential Directive/Hspd-7, December 17,
2003.
[5] European Parliament legislative resolution of 10 July 2007 on
the proposal for a Council directive on the identification and designation
of European Critical Infrastructure and the assessment
of the need to improve their protection (COM(2006)0787 - C6-
0053/2007 - 2006/0276(CNS)).
[6] EU Critical Infrastructure Protection (CIP), Council of the European
Union, Brussels, 28 October 2005.
[7] McClanahan Robert H. :“The benefits of networked SCADA systems
utilizing IP-enabled networks”, Arkansas Electric Cooperative
Corporation, IEEE, 2002.
[8] ISO/IEC 13335-1:2004, Information Technology - Security Techniques
- Management of information and communications technology
security - Part 1: Concepts and models for information
and communications technology security management.
[9] http://nvd.nist.gov/.
[10] http://osvdb.org/.
[11] Choraś M., Renk R., Flizikowski A., Hołubowicz W.: Ontologybased
description of networks vulnerabilities, Polish Journal of
Environmental Studies, vol. 5c, 2008.
[12] SWRL: A Semantic Web Rule Language Combning OWL and
RuleML. W3C Member Submission, http://www.w3.org/Submission/SWRL/.
[13] Stamp J., Dillinger J., Young W.: Common vulnerabilities in critical
infrastructure control systems. Networked Systems Survivability
and Assurance Department, Jennifer DePoy, Information
Operations Red Team & Assessments Department, Sandia National
Laboratories, 22 May 2003.
[14] “D2.2 - Identification of Vulnerabilities” , INSPIRE Project, July
2009.
Synthesis and management of system with
parallel multiprocessors and fault tolerance
(Synteza i zarządzanie komputerowych systemów z równoległymi wieloprocesorami
i tolerowaniem uszkodzeń)
dr MIECZYSŁAW DRABOWSKI
Cracow University of Technology, Faculty of Electrical and Computer Engineering
The management of computer systems [1,2] is an issue the
basic objective of which is to find an optimum solution, satisfy
the requirements and limitations enforced by the given specification
of operations (tasks) and resources. The following criteria
of optimality are usually considered: the costs of planning in
execution of operations, its operating speed and reliability. The
problems of operations and resources scheduling are one of
the most significant issues occurring at the procedure planning
of operating system responsible for controlling the distribution
of tasks and resources in computer systems. The problem of
control in resources requires the list of available hardware resources
- the set describing resources - which can be used to
realization of operations. The starting point for constructing our
approach to the issues of fault tolerance system is the deterministic
theory of task scheduling [3]. Accordingly, decomposition
of the general task scheduling model is suggested,
adequate to the problems of fault tolerance system [4]. We will
discuss the system: ∑={R,T,C}, where: R - resources, T - tasks
and C - optimality criteria. We assume that processor set
P={P 1 ,P 2 ,…,P m } consists of m elements and additional resources
set A = { A 1 ,A 2 ,…,A p } consist of p elements). We consider
a set of n tasks to be processed with a set of resources
38 ELEKTRONIKA 11/2009