CPSS — Cyber-Physical Severity Scale: Dataset and Reference Implementation

CPSS (Cyber-Physical Severity Scale) is a logarithmic severity scale for evaluating the physical, environmental, and societal consequences of cyberattacks against Industrial Control Systems (ICS). CPSS bridges the gap between existing metrics: CVSS covers software vulnerability exploitability, HAZOP/SIL covers industrial process safety, and INES covers nuclear accidents only. CPSS integrates the full chain from cyber intrusion → physical accident → societal impact into a single deterministic score. Formula CPSS = max(H, E, I, C) H (Human): log10(deaths × 100 + hospitalized × 10 + 1) E (Environmental): log10(area_m² × P / 10) I (Infrastructure): log10(population / 1000 + 1) C (Economic): log10(loss_usd / 100000) Repository Contents dataset/cpss_incidents.csv — 100 documented ICS cyber incidents (2000–2024), covering power, water, oil & gas, manufacturing, and transportation sectors. Each entry includes primary source reference, source type (academic / government / vendor report / news), and confidence level. src/cpss_calculator.py — Reference implementation of the CPSS formula with CLI interface. docs/cpss_spec.md — Full specification including scoring rubrics, calibration examples, and dataset inclusion criteria. paper/cpss_arxiv.tex — LaTeX source of the accompanying arXiv preprint.