Risk assessment and control selection for cyber-physical systems: a case study on supply chain tracking systems

Aim: The paper proposes a novel risk assessment method ology for complex cyber-physical systems: proposed may assist assessors to: (a) assess the risks deriving from cyber and physical interactions among components; (b) prioritize control selection process mitigating these risks. Methods: To achieve this, we combine modify appropriately two recent ologies targeted to systems interactions, as underlying building blocks. By applying existing ology, enable utilization of well-known software vulnerability taxonomies, extract impact submetrics all system components. These metrics are then fed analysis phase in order overall list potential mitigation controls. Results: validate applicability efficiency apply it realistic scenario involving supply chain tracking systems. Conclusion: Our results show that can be effectively applied capture components application scenarios, while large scale networks further testing should carried out.