Accession Number : AD1053739

Title :   Quantifying Improbability: An Analysis of the Lloyd's of London Business Blackout Cyber Attack Scenario

Descriptive Note : Technical Report

Corporate Author : Johns Hopkins University Applied Physics Laboratory LLC Laurel United States

Personal Author(s) : Lee,Susan ; Moskowitz,Michael ; Pinelis,Jane

Full Text :

Report Date : 01 Jun 2018

Pagination or Media Count : 54

Abstract : Scenarios that describe cyber attacks on the electric grid consistently predict significant disruptions to the economy and citizens quality of life. Most offer anecdotal support for the grids vulnerability to such an attack and assume the existence of an adversary with the means and intent to launch the attack. An estimate of risk, however, also requires knowledge of the probability that an attack of the required caliber can be successfully executed. Quantifying the probability of success for a large-scale cyber attack is hard because of the lack of precedent and the changing nature of threats and vulnerabilities. This report uses the grid cyber attack scenario outlined in the Lloyds of London and the University of Cambridge Centre for Risk Studies 2015 report, Business Blackout, to demonstrate how a probabilistic assessment could be used to quantify the likelihood that the scenario could occur. The analysis is subject to the limitations inherent in any probabilistic risk assessment; however, it serves to highlight some interesting phenomena that deserve further investigation, such as the importance of some individual power plants in influencing the adversarys probability of success. In addition, it describes feasible data collection that would materially increase the validity of such an analysis.

Descriptors :   cyberattacks , national security , vulnerability , electrical grids , risk analysis , probability

Subject Categories : Electric Power Production and Distribution
      Statistics and Probability
      Operations Research

Distribution Statement : APPROVED FOR PUBLIC RELEASE