i have full project just i wanna start with first stage .i have 4 articles just i wanna analysis it into formatLITERATURE REVIEW which i uploaded
Systems-Based Cyber Security in the Supply Chain Systems-Based Cyber Security in the Supply Chain Scott Barron, Yong Min Cho, Andrew Hua, William Norcross, Jack Voigt, and Yacov Haimes University of Virginia, seb2md, yc2bk, ah4we, wmn7zu, jkv3bf, and
[email protected] Abstract - The importance of the many sources of risk to the supply chain has been recognized by the practitioners and leadership in this sector of the economy. Cyber security is paramount to the success of the supply chain sector, which constitutes a safety-critical system for the U.S. and global economy. The diverse consequences from a malevolent attack could adversely affect inventory, product quality, time of delivery and the multiple sequential chain-effects due to these interdependent and interconnected economies. As a team, we leveraged the knowledge that we have accrued throughout our academic career with the knowledge and experience of our Technical Advisor, Yacov Haimes. The vast research opportunities at the University of Virginia and the seminal contributions to the field of systems of systems risk analysis further enhanced this comprehensive report. Building on our research and on Hierarchical Holographic Modeling, we performed risk assessment and management. Furthermore, as a team, we developed an overview of this complex system of systems, and generated multiple scenarios of malevolent penetration to the supply chain. Then through the use of Risk Filtering and Risk Management we reduced the large number of risk scenarios to a small set of critical scenarios. To apply our modeling and analytical skills to an emergent “risk” we examined the impact of malevolent use of the three- dimensional (3D) printers might pose to the integrity of the supply chain and the possibilities of this revolutionary technology as a malevolent medium to decimate the safety-critical supply chain systems of systems. In sum, through the use of modeling and analyzing supply chains as complex systems of systems, and by identifying shared- states, resources, decisions, and other variables among the subsystems of the supply chain, we have been able to identify and isolate safety critical features of the supply chain. Index Terms - Hierarchical Holographic Modeling (HHM), Risk Filtering and Risk Management (RFRM), global supply chain, three-dimensional printing (3D). INTRODUCTION TO THE SUPPLY CHAIN I. Introduction and Motivation The supply chain is the backbone of the global economy, and its success is paramount to the success of individual economies as well as individual businesses and their customers. The evolving and growing global supply chain requires risk management infrastructure to keep the global economy operating at peak efficiency. Each facet of the supply chain range from cultural to temporal to organizational, plays a crucial role in its success; however, each of these elements also has a unique risk profile that must be considered. This multi-faceted nature of supply chains requires extensive systems analysis to properly understand and model the complex system of systems and the risks thereto. Since it is not possible to review all relevant supply chain literature due to its vast reach, the analysis focused explicitly on classifying and defining supply chain risk and problem planning. Our research began with a comprehensive review of the areas in the global supply chain that are prone to extreme risk. The importance of the many sources of risk to the supply chain has been recognized by the practitioners and the leadership of this important economic sector. Cyber security is of paramount importance to the success of the supply chain sector, constitutes a safety-critical system for the entire U.S. and global economy. The diverse consequences of a cyber-attack may adversely affect inventory, product quality, time of delivery, and the multiple sequential chain-effects because all aspects of the supply chain are interconnected and interdependent. To build on this knowledge, it was important to learn more about the modeling methodology and techniques to visualize the supply chain. A systems analysis allowed us to model all the different types of risk scenarios that could occur within the supply chain system. To acquire a more mature understanding of the risk needs in the supply chain, it was important to examine previous research to help develop a solid foundation of this systems risk tendencies and how it can be properly measured and modeled. To do so, each process and decision must be examined due to its high level of uncertainty and must be continuously monitored for damage [1]. Additionally, these uncertainties are not solely restricted to specific areas of the economy as can be seen in examples, such as Hurricane Katrina, flooding in Thailand, and Japanese earthquake and tsunami incidents among many others, which all reveal an extreme lack of preparedness of supply chain management toward risk uncertainty [1]. Supply chain risk management is a global concern that crosses multiple business and humanitarian boundaries ranging from finance to healthcare to actuarial science and psychology. Our main research began with the Supervisory Control and Data Acquisition (SCADA) systems. We appreciated its importance by providing a strong foundational understanding of the supply chain. SCADA and the systems it manages are crucial to the operational aspects of critical infrastructure [2]. SCADA systems are part of a larger grouping known as “Industrial Control Systems” (ICS), “Process Control 2016 IEEE Systems and Information Engineering Design Conference (SIEDS '16) 978-1-5090-0970-1/16/$31.00 ©2016 IEEE 20 Systems” (PCS) or “Real-Time Systems” (RTS), which are used for controlling and monitoring the logical processes, including physical operations that the delivery of critical infrastructure is dependent upon. Failure of, or security breaches in these systems, could result in wide-reaching adverse impacts for not only the organization but also the community and economy at-large dependent on the organization’s goods or services. Organizations that have critical infrastructures include manufacturing, logistics and transportation, utilities, telecommunication services, and agriculture. The advent of 3D printing, with its on-site and time saving capabilities, is predicted to be extremely useful to the supply chain and the economy, especially with the ever evolving technology and increasing consumer demand. To determine the scope of the Capstone project, the team examined the niche element of 3D printing and this emerging technology’s impact on and potential risk to the supply chain. The modeling methodology and techniques that we used to model the supply chain were then employed to evaluate the risks attendant to 3D printing. II. Goals and Objectives The first step in our research was to gain a better understanding of the supply chain components and its associated risks. This involved using systems analysis and methodology techniques to model the multi-faceted, complex nature of supply chain systems and the different kinds of risks associated with different aspects of the supply chain. Next, we developed an understanding of the methods to mitigate risk in the different components the feasible measures to take. Our next step was to research the power and restraints that 3D printing offers in its application to the supply chain. Finally, we conducted an experiment to illustrate the negative effects of the use of 3D printing and its product if tampered with in a malicious manner (See Figure 1). SUPPLY CHAIN, RISK MANAGEMENT AND 3D PRINTING FIGURE 1 FLOW CHART SHOWING THAT SUPPLY CHAIN PROCESS [7]. The global supply chain enables and integrates the supply and demand sectors of the interconnected and interdependent global economy. The supply chain is always evolving as technologies, manufacturing processes, transportation methods, and consumer needs change. Essential to our project is an understanding of the technical aspects and complexity of the economic supply chain and its associated risks. Each step of the supply chain introduces new risks. Any sort of attack, contamination, or accident could have cascading effects that would impact all stakeholders. Shown above in Figure 1 are the different phases that goods must pass through in the supply chain. While an individual may not observe every one of these processes in action, almost all consumer products pass through this map in some way or another. The supply chain is constantly implementing new technologies to increase efficiency and decrease transportation time and costs. One example of technology that is emerging in this drive towards efficiency is 3D printing. Some say that 3D printing will alter traditional design and manufacturing at a level of innovation comparable to the invention of electricity or the Internet. While 3D printing is predicted to have a major impact on future supply chain system of systems, it may be several years before 3D printing technology reaches its full potential. First invented in the 1980s by Charles Hull, 3D printing has made leaps in a very short amount of time. Today this technology is used to build anything from racecar components to human organs. Analyst firm Canalys expects the global market for 3D printers to reach $16 billion by 2018 [3]. Hans-Georg Kaltenbrunner, vice president in manufacturing strategy EMEA at JDA Software, argues that soon, 3D printers will be so common that people will have them in their houses, similar to how computers first took off with the public. While in-home 3D printers will likely have simple domestic uses, manufacturers’ use of high tech printers will revolutionize the supply chain. One impact of 3D printing technology on the supply chain is disintermediation. Traditionally the supply chain is segmented into a series of intermediate steps where certain firms play crucial roles in manufacturing, transporting, and combing products. 3D printing technology will enable manufacturers to print and construct products on their own, without the help of other suppliers. Another effect of 3D printing on the supply chain will be a decrease in geographically fixed distribution network. 3D printing manufacturing technology will allow design to become increasingly virtual and remote and production to become increasingly local. Information networks, rather than geographic networks, will be the channels through which firms in a 3D printing economy deliver value to their customers. 3D printing will also contribute to the vertical integration of the supply chain. This will occur through extremely quick prototyping, which leads to shorter lead times and creates an environment where direct communication of standard design