{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T15:56:46Z","timestamp":1792684606782,"version":"4.5.0"},"reference-count":52,"publisher":"MDPI AG","issue":"5","license":[{"start":{"date-parts":[[2021,3,1]],"date-time":"2021-03-01T00:00:00Z","timestamp":1614556800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["773960 \u2014 DELTA \u2014 H2020-LCE-2016-2017\/H2020-LCE-2017-SGS"],"award-info":[{"award-number":["773960 \u2014 DELTA \u2014 H2020-LCE-2016-2017\/H2020-LCE-2017-SGS"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The increasingly witnessed integration of information technology with operational technology leads to the formation of Cyber-Physical Systems (CPSs) that intertwine physical and cyber components and connect to each other to form systems-of-systems. This interconnection enables the offering of functionality beyond the combined offering of each individual component, but at the same time increases the cyber risk of the overall system, as such risk propagates between and aggregates at component systems. The complexity of the resulting systems-of-systems in many cases leads to difficulty in analyzing cyber risk. Additionally, the selection of cybersecurity controls that will effectively and efficiently treat the cyber risk is commonly performed manually, or at best with limited automated decision support. In this work, we propose a method for analyzing risk propagation and aggregation in complex CPSs utilizing the results of risk assessments of their individual constituents. Additionally, we propose a method employing evolutionary programming for automating the selection of an optimal set of cybersecurity controls out of a list of available controls, that will minimize the residual risk and the cost associated with the implementation of these measures. We illustrate the workings of the proposed methods by applying them to the navigational systems of two variants of the Cyber-Enabled Ship (C-ES), namely the autonomous ship and the remotely controlled ship. The results are sets of cybersecurity controls applied to those components of the overall system that have been identified in previous studies as the most vulnerable ones; such controls minimize the residual risk, while also minimizing the cost of implementation.<\/jats:p>","DOI":"10.3390\/s21051691","type":"journal-article","created":{"date-parts":[[2021,3,1]],"date-time":"2021-03-01T10:25:18Z","timestamp":1614594318000},"page":"1691","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":40,"title":["Cyber Risk Propagation and Optimal Selection of Cybersecurity Controls for Complex Cyberphysical Systems"],"prefix":"10.3390","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1278-1943","authenticated-orcid":false,"given":"Georgios","family":"Kavallieratos","sequence":"first","affiliation":[{"name":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, N-2815 Gj\u00f8vik, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2947-486X","authenticated-orcid":false,"given":"Georgios","family":"Spathoulas","sequence":"additional","affiliation":[{"name":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, N-2815 Gj\u00f8vik, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2966-9683","authenticated-orcid":false,"given":"Sokratis","family":"Katsikas","sequence":"additional","affiliation":[{"name":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, N-2815 Gj\u00f8vik, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2021,3,1]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1109\/MDAT.2017.2709310","article-title":"Security and privacy in cyber-physical systems: A survey of surveys","volume":"34","author":"Giraldo","year":"2017","journal-title":"IEEE Des. Test"},{"key":"ref_2","unstructured":"Cyber-Physical Systems Public Working Group (CPS PWG) (2017). Framework for Cyber-Physical Systems."},{"key":"ref_3","unstructured":"International Organization for Standardization, ISO (2018). ISO 31000:2018 Risk Management\u2014Guidelines, ISO."},{"key":"ref_4","unstructured":"International Organization for Standardization, ISO (2018). ISO\/IEC 27005:2018 Information Technology\u2014Security Techniques\u2014Information Security Risk Management, ISO."},{"key":"ref_5","first-page":"247","article-title":"Guide to industrial control systems (ICS) security","volume":"800","author":"Stouffer","year":"2015","journal-title":"NIST Spec. Publ."},{"key":"ref_6","first-page":"20","article-title":"Cyber-attacks against the autonomous ship","volume":"Volume 11387","author":"Kavallieratos","year":"2018","journal-title":"Proceedings of the SECPRE 2018, CyberICPS 2018"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Kavallieratos, G., Katsikas, S., and Gkioulos, V. (2020, January 23\u201326). Modelling Shipping 4.0: A Reference Architecture for the Cyber-Enabled Ship. Proceedings of the Asian Conference on Intelligent Information and Database Systems, Phuket, Thailand.","DOI":"10.1007\/978-3-030-42058-1_17"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Kouns, J., and Minoli, D. (2010). Information Technology Risk Management in Enterprise Environments, John Wiley & Sons, Inc.","DOI":"10.1002\/9780470558133"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Ali, S., Balushi, T., Nadir, Z., and Hussain, O. (2018). Risk Management for CPS Security. Cyber Security for Cyber Physical Systems, Springer International Publishing AG.","DOI":"10.1007\/978-3-319-75880-0"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"221","DOI":"10.1049\/iet-cps.2018.5068","article-title":"Safety and security risk assessment in Cyber-Physical Systems","volume":"4","author":"Lyu","year":"2019","journal-title":"IET Cyber-Phys. Syst. Theory Appl."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"3453","DOI":"10.1109\/COMST.2018.2855563","article-title":"A Survey of IoT-Enabled Cyberattacks: Assessing Attack Paths to Critical Infrastructures and Services","volume":"20","author":"Stellios","year":"2018","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"92","DOI":"10.1080\/23335777.2019.1600035","article-title":"Recommendations for smart grid security risk management","volume":"5","author":"Lamba","year":"2019","journal-title":"Cyber-Phys. Syst."},{"key":"ref_13","unstructured":"You, B., Zhang, Y., and Cheng, L.C. (2017, January 19\u201321). Review on Cyber Security Risk Assessment and Evaluation and Their Approaches on Maritime Transportation. Proceedings of the 30th Annual Conference of International Chinese Transportation Professionals Association, Houston, TX, USA."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"129","DOI":"10.1007\/s13437-019-00162-2","article-title":"MaCRA: A model-based framework for maritime cyber-risk assessment","volume":"18","author":"Tam","year":"2019","journal-title":"WMU J. Marit. Aff."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Tam, K., and Jones, K. (2018, January 11\u201312). Cyber-risk assessment for autonomous ships. Proceedings of the International Conference on Cyber Security and Protection of Digital Services (Cyber Security), Glasgow, UK.","DOI":"10.1109\/CyberSecPODS.2018.8560690"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"509","DOI":"10.1007\/s13437-019-00183-x","article-title":"Assessing ship cyber risks: A framework and case study of ECDIS security","volume":"18","author":"Svilicic","year":"2019","journal-title":"WMU J. Marit. Aff."},{"key":"ref_17","unstructured":"Kim, Y.G., Jeong, D., Park, S.H., Lim, J., and Baik, D.K. (2006, January 3\u20136). Modeling and simulation for security risk propagation in critical information systems. Proceedings of the International Conference on Computational and Information Science, Guangzhou, China."},{"key":"ref_18","first-page":"341","article-title":"A new assessment and improvement model of risk propagation in information security","volume":"1","author":"Kondakci","year":"2007","journal-title":"Int. J. Inf. Comput. Secur."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1016\/j.ins.2013.02.036","article-title":"A security risk analysis model for information systems: Causal relationships of risk factors and vulnerability propagation analysis","volume":"256","author":"Feng","year":"2014","journal-title":"Inf. Sci."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1016\/j.future.2016.07.016","article-title":"A method for evaluating the consequence propagation of security attacks in cyber\u2013physical systems","volume":"67","author":"Orojloo","year":"2017","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"7428458","DOI":"10.1155\/2019\/7428458","article-title":"Cascading failures analysis considering extreme virus propagation of cyber-physical systems in smart grids","volume":"2019","author":"Wang","year":"2019","journal-title":"Complexity"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1007\/978-3-030-64330-0_2","article-title":"Attack Path Analysis for Cyber Physical Systems","volume":"Volume 12501","author":"Kavallieratos","year":"2020","journal-title":"Computer Security: ESORICS 2020 International Workshops, CyberICPS, SECPRE, and ADIoT, Guildford, UK, 14\u201318 September 2020, Revised Selected Papers"},{"key":"ref_23","first-page":"1","article-title":"Risk propagation analysis and visualization using percolation theory","volume":"7","author":"Rass","year":"2016","journal-title":"Int. J. Adv. Comput. Sci. Appl. (IJACSA)"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"68813","DOI":"10.1109\/ACCESS.2018.2879488","article-title":"Method for quantitative estimation of the risk propagation threshold in electric power CPS based on seepage probability","volume":"6","author":"Qu","year":"2018","journal-title":"IEEE Access"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Zhu, B., Deng, S., Xu, Y., Yuan, X., and Zhang, Z. (2019). Information security risk propagation model based on the SEIR infectious disease model for smart grid. Information, 10.","DOI":"10.3390\/info10100323"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Malik, A.A., and Tosh, D.K. (2020, January 3\u20136). Quantitative Risk Modeling and Analysis for Large-Scale Cyber-Physical Systems. Proceedings of the 29th International Conference on Computer Communications and Networks (ICCCN), Honolulu, HI, USA.","DOI":"10.1109\/ICCCN49398.2020.9209654"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"643","DOI":"10.1016\/j.cose.2010.02.003","article-title":"A multi-layer criticality assessment methodology based on interdependencies","volume":"29","author":"Theoharidou","year":"2010","journal-title":"Comput. Secur."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"128","DOI":"10.1504\/IJRAM.2011.042113","article-title":"Risk assessment methodology for interdependent critical infrastructures","volume":"15","author":"Theoharidou","year":"2011","journal-title":"Int. J. Risk Assess. Manag."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Zhou, X., Wang, F., and Ma, Y. (2015, January 2\u20135). An overview on energy internet. Proceedings of the 2015 IEEE International Conference on Mechatronics and Automation (ICMA), Beijing, China.","DOI":"10.1109\/ICMA.2015.7237469"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Hong, Q., Jianwei, T., Zheng, T., Wenhui, Q., Chun, L., Xi, L., and Hongyu, Z. (2017, January 26\u201328). An information security risk assessment algorithm based on risk propagation in energy internet. Proceedings of the IEEE Conference on Energy Internet and Energy System Integration (EI2), Beijing, China.","DOI":"10.1109\/EI2.2017.8245703"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"1133","DOI":"10.1109\/TCSS.2018.2858440","article-title":"Dynamic security risk evaluation via hybrid Bayesian risk graph in cyber-physical social systems","volume":"5","author":"Li","year":"2018","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"181404","DOI":"10.1109\/ACCESS.2020.3027527","article-title":"Two-Level System of on-Line Risk Assessment in the National Cyberspace","volume":"8","author":"Karbowski","year":"2020","journal-title":"IEEE Access"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"156","DOI":"10.1016\/j.dss.2013.01.001","article-title":"Selection of optimal countermeasure portfolio in IT security planning","volume":"55","author":"Sawik","year":"2013","journal-title":"Decis. Support Syst."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"599","DOI":"10.1016\/j.dss.2012.04.001","article-title":"A novel risk assessment and optimisation model for a multi-objective network security countermeasure selection problem","volume":"53","author":"Viduto","year":"2012","journal-title":"Decis. Support Syst."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"318","DOI":"10.1016\/j.ejor.2015.06.048","article-title":"Optimal selection of IT security safeguards from an existing knowledge base","volume":"248","author":"Schilling","year":"2016","journal-title":"Eur. J. Oper. Res."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"1403","DOI":"10.1016\/j.ress.2009.02.001","article-title":"Hierarchical, model-based risk management of critical infrastructures","volume":"94","author":"Baiardi","year":"2009","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/j.compeleceng.2015.07.023","article-title":"Selecting optimal countermeasures for attacks against critical systems using the attack volume model and the RORI index","volume":"47","author":"Alvarez","year":"2015","journal-title":"Comput. Electr. Eng."},{"key":"ref_38","unstructured":"Goldberg, D.E. (1989). Genetic Algorithms in Search, Optimization and Machine Learning, Addison-Wesley Longman Publishing Co., Inc.. [1st ed.]."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"361","DOI":"10.1162\/evco.1996.4.4.361","article-title":"A Comparison of Selection Schemes Used in Evolutionary Algorithms","volume":"4","author":"Blickle","year":"1996","journal-title":"Evol. Comput."},{"key":"ref_40","unstructured":"Shostack, A. (2014). Threat Modeling: Designing for Security, John Wiley & Sons."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Zinsmaier, S., Langweg, H., and Waldvogel, M. (2020, January 25\u201327). A Practical Approach to Stakeholder-driven Determination of Security Requirements based on the GDPR and Common Criteria. Proceedings of the 6th International Conference on Information Systems Security and Privacy\u2014Volume 1: ICISSP, Valletta, Malta.","DOI":"10.5220\/0008960604730480"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Kavallieratos, G., Gkioulos, V., and Katsikas, S.K. (2019, January 29\u201331). Threat analysis in dynamic environments: The case of the smart home. Proceedings of the 15th International Conference on Distributed Computing in Sensor Systems (DCOSS), Santorini, Greece.","DOI":"10.1109\/DCOSS.2019.00060"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Seifert, D., and Reza, H. (2016). A security analysis of cyber-physical systems architecture for healthcare. Computers, 5.","DOI":"10.3390\/computers5040027"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Kavallieratos, G., and Katsikas, S. (2020). Managing Cyber Security Risks of the Cyber-Enabled Ship. J. Mar. Sci. Eng., 8.","DOI":"10.3390\/jmse8100768"},{"key":"ref_45","unstructured":"Microsoft (2021, February 28). Chapter 3\u2014Threat Modeling. Available online: https:\/\/docs.microsoft.com\/en-us\/previous-versions\/msp-np\/ff648644(v=pandp.10)?redirectedfrom=MSDN."},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Rothlauf, F. (2011). Optimization Methods. Design of Modern Heuristics: Principles and Application, Springer.","DOI":"10.1007\/978-3-540-72962-4"},{"key":"ref_47","unstructured":"BIMCO, CLIA, ICS, INTERCARGO, INTERMANAGER, INTERTANKO, IUMI, OCIMF, and World Shipping Council (2021, February 28). The Guidelines on Cyber Security Onboard Ships. Version 4. Available online: https:\/\/www.bimco.org\/-\/media\/bimco\/about-us-and-our-members\/publications\/ebooks\/guidelines-on-cyber-security-onboard-ships-v4.ashx."},{"key":"ref_48","unstructured":"The President of the United States (2021, February 28). National Maritime Cybersecurity Plan, Available online: https:\/\/www.hsdl.org\/?view&did=848704."},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"6617","DOI":"10.1109\/TII.2020.2976840","article-title":"Shipping 4.0: Security requirements for the Cyber-Enabled Ship","volume":"16","author":"Kavallieratos","year":"2020","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_50","doi-asserted-by":"crossref","first-page":"103429","DOI":"10.1016\/j.csi.2020.103429","article-title":"SafeSec Tropos: Joint security and safety requirements elicitation","volume":"70","author":"Kavallieratos","year":"2020","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_51","unstructured":"International Maritime Organization (2021, January 24). Convention on the International Regulations for Preventing Collisions at Sea, 1972 (COLREGs). Available online: https:\/\/www.imo.org\/en\/About\/Conventions\/Pages\/COLREG.aspx."},{"key":"ref_52","unstructured":"International Maritime Organization (2020, September 21). IMO Takes First Steps to Address Autonomous Ships. Available online: http:\/\/www.imo.org\/en\/mediacentre\/pressbriefings\/pages\/08-msc-99-mass-scoping.aspx."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/5\/1691\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:31:00Z","timestamp":1760160660000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/5\/1691"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,3,1]]},"references-count":52,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2021,3]]}},"alternative-id":["s21051691"],"URL":"https:\/\/doi.org\/10.3390\/s21051691","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,3,1]]}}}