AbstractCompared with safety assessment, security risk assessment in chemical and process plants is more challenging. On top of uncertain environmental and operational parameters and interdependent failures, which are common in the safety risk assessment of complex systems and infrastructures, there are other uncertain parameters such as the likelihood of attack scenarios and attackers' expected outcomes. As such, the application of probabilistic risk assessment (PRA) techniques, which have long been applied to safety risk assessment and management, to security risk management may result in nonoptimal or suboptimal decisions. In the present study, we will demonstrate how a combination of PRA and game theory may outperform PRA and lead to a more cost‐effective allocation of security measures. For this purpose, the outcome of a dynamic Bayesian network—as a PRA technique—is used as input to the minimax strategy—as a game theoretic strategy—for security risk management of a tank terminal under attacks with a homemade bomb. The proposed risk‐based minimax strategy alleviates the need for estimation of attack likelihoods or attacker payoffs, which would have otherwise been too challenging to estimate if the analyst solely depended on a PRA technique.
Read full abstract