CyberSAGE: A Tool for Automatic Security Assessment of Cyber-Physical Systems

Abstract

We present CyberSAGE, a Cyber Security Argument Graph Evaluation tool for cyber-physical systems. Specifically, CyberSAGE supports the automatic generation of security argument graphs, a graphical formalism that integrates diverse inputs—including workflow information for processes executed in the system, physical network topology, and attacker models—to argue about the level of security for the target system. Based on the generated graphs, CyberSAGE can combine numerical information to compute quantitative security assessment results. We illustrate the use of CyberSAGE through a power grid case study.