Advanced attack graph framework for operational technology: scalable modeling, validation, and risk mitigation

Operational Technology (OT) systems are essential for industrial processes but increasingly face cyber threats due to their integration with IT networks. This paper introduces an advanced framework for modeling, analyzing, and mitigating OT cyber risks using logical attack graphs with OT-specific modeling, including protocols, device hierarchies, and multi-layer dependencies. To enhance scalability, a novel graph pruning algorithm eliminates 81–98% of redundant nodes, reducing complexity while preserving critical attack paths. Additionally, an automated validation pipeline bridges theoretical modeling and real-world applicability by refining attack graphs and providing actionable mitigation insights. The framework’s modular and adaptable design ensures it remains effective in evolving OT environments, addressing emerging threats with high resilience. Validation in realistic OT scenarios confirms its scalability and effectiveness, making it a practical, extensible cybersecurity solution for protecting industrial infrastructures and critical processes from advanced cyber risks.