Telling faults from cyber-attacks in a multi-modal logistic system with complex network analysis

We investigate the application of methodologies for the analysis of complex networks to understand the properties of systems of systems in a cybersecurity context. We are interested to resilience and attribution: the first relates to the behavior of the system in case of faults/attacks, namely to its capacity to recover full or partial functionality after a fault/attack; the second corresponds to the capability to tell faults from attacks, namely to trace the cause of an observed malfunction back to its originating cause(s). We present experiments to witness the effectiveness of our methodology considering a discrete event simulation of a multimodal logistic network featuring 40 nodes distributed across Italy and a daily traffic roughly corresponding to the number of containers shipped through in Italian ports yearly, averaged on a daily basis.