The VIKING project is now close to be finished and we can report on our research work. Attached to this News you will find summary reports from three of our main research areas:

• The Cyber Security Modeling Language (CySeMoL). Using a Meta language and models of control system architectures we can estimate the probability that a cyber attack would compromise a specific control system.
• The VIKING Cities Simulator (ViCiSi) is a virtual society model. Using models of a virtual society we can calculate the economical cost for society, as lost GDP, from a blackout. We also give a measurement of “soft factors” caused by a blackout in the form of an Impact Magnitude scale.
• The VIKING Testbed. We have developed a Testbed with a real SCADA system and models of a high voltage grid, substations including a distribution grid and of a virtual society. The Test bed can be used to demonstrate cyber attacks on a SCADA system and the corresponding consequences in the grid and on the society.

Attachments:

A1_CySeMoL.pdf	[ ]	51 Kb
A2_ViCiSi.pdf	[ ]	359 Kb
A3_ Testbed Overview.pdf	[ ]	289 Kb

The sixth VIKING project meeting was held at ABB in Mannheim on October 4 and 5, 2011. We followed the established structure for these meetings and presented and discussed the upcoming deliverables for the last period which is end of October 2011 (Project Month 36 of VIKING). In the project meeting the six last deliverables of the VIKING project where presented in draft format and discussed. These deliverables are:

• D3.1 Vulnerability assessment of SCADA systems
• D3.3 Consequence and cost analysis of SCADA system vulnerabilities
• D4.2 Robust and secure communication protocols
• D4.3 Mitigation and protection strategies
• D5.3 Testbed status and Test Cases
• D6.3 Final plan for the use and dissemination of foreground

Under the D5.3 we discussed the Story Board examples. The Story Boards define complete attack scenarios from cyber attacks to consequences in the society and now includes the quantitative numbers for likelihood of succeeding with a specific attack and lost GDP. One of the main results of VIKING will be these descriptions; some will be evaluated purely on the theoretical models which have been defined as part of the project while others will also be implemented on the Test Bed for demonstration purposes.

It has now been decided that the VIKING Final workshop will be held in Rome on November 30 in connection to the SANS SCADA Security conference. On this work shop we will present the VIKING results and demonstrate how the results can be used in real SCADA systems. We will also demonstrate some of the Story Board attacks on our test bed including the actual attack on the SCADA system, its impacts in the power grid and the consequences in the society.