Ulrike Lechner

A Cyberthreat Search Process and Service

Searching for IT-Security related information should be a standardized and/or partially automated process. This position paper presents a literature review that depicts a reference process design and the design of a tool to support search and analysis of IT-security related information.

An Operator-Driven Approach for Modeling Interdependencies in Critical Infrastructures Based on Critical Services and Sectors

To trigger disruptive cascading effects among Critical Infrastructures (CIs), advanced cyber attacks take advantage of dependences among organizations. CIs are highly interconnected due to services and products they deliver one another to guarantee correct operational processes in such complex system-of-systems. Consequently, proper countermeasures in case of threats to CIs must consider interdependencies between them. The strategic use of information systems to coordinate response efforts of CI operators at national and international levels is a major objective towards more resilient societies. As relevant contribution to the development of a cyber incident early warning system for CI operators, this paper presents a System Dynamics (SD) interdependency model based on critical services that different operators must provide to guarantee the correct functioning of a CI. We explain model requirements and characteristics, and demonstrate how it can be used to gain situational awareness in the context of European CIs.

Robust designs for logistics service providers: a case study

This paper presents the results of a case study about robustness in supply chain management, conducted with an international transport logistics provider for valuable goods. In general, transport logistics providers for valuable goods have to be more robust by nature and depend of continuous engineering of its performances. Robustness can be seen as an umbrella term which consists of a subset of business concepts and tools. These concepts and tools interdepend on each other. Their aim is to control and monitor performance indicators, keep defined quality, detect risks and threats in and out of the organization, etc.