A security-aware framework for designing industrial engineering processesA security-aware framework for designing industrial engineering processes Peer-Reviewed Journal Publication Δημοσίευση σε Περιοδικό με Κριτές 2023-02-232021enThis work was supported in part by the EU-funded SPIRE-2019 FACTLOG Project (FACTLOG: Energy Aware Factory Analytics for Process Industries) under Grant GA 869951, and in part by the Hellenic Ministry of Digital Governance, through a Research Grant offered to the Research Center of Athens University of Economics and Business.Modern critical infrastructures (CI) are complex Cyber-Physical-Systems (CPS) that tightly integrate physical processes with information and communication technology components. Numerous safety mishaps and security attacks in such systems have demonstrated the need to ensure their safety and security from early design stages. Research on CPS has mostly focused on securing existing, implemented industrial systems, while safety and security consideration during the design stages of modern industrial infrastructures has largely gone unnoticed. In this paper, we present a framework that extends previous, preliminary work on the integration of security in industrial engineering design practices, and provide an algorithmic approach that effectively reduces risk during industrial system design lifecycles. We achieve this by analyzing flows of materials and information related to physical processes using three steps: (1) Identifying critical components and flows, (2) prioritizing flows based on their ties to high risk and importance in terms of dependencies, and (3) classifying system components based on their influence on the overall industrial system. To do that, we utilize (i) material flow networks (MFN) for modelling/designing the physical system (ii) dependency risk graphs for analyzing networks dependencies and assessing the system, in terms of risk, (iii) graph minimum spanning trees, and (iv) network centrality metrics. To evaluate our approach, we model and assess the production chain corresponding to an oil refinery plant’s Liquefied Petroleum Gas (LPG) purification process. Preliminary findings demonstrate the complex dependencies between cybersecurity vulnerabilities and system safety.http://creativecommons.org/licenses/by/4.0/IEEE Access9163065-163085Dedousis_et_al_IEEE Access_9_2021.pdfChania [Greece]Library of TUC2023-02-23application/pdf2.0 MBfree Dedousis Panagiotis Stergiopoulos George Arampatzis Georgios Αραμπατζης Γεωργιος Gritzalis, Dimitris Institute of Electrical and Electronics Engineers Security by design Industrial engineering Risk analysis Risk assessment Risk mitigation Dependency risk graphs CPS dependencies Graph centrality