Guide to Industrial Control Systems (ICS) Security

By K. Stouffer, Joseph Falco, Karen Scarfone. 2015

1,711 citations recorded by the source corpus.

This document provides guidance on how to secure Industrial Control Systems (ICS), including Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and other control system configurations such as Programmable Logic Controllers (PLC), while addressing their unique performance, reliability, and safety requirements. The document provides an overview of ICS and typical system topologies, identifies typical threats and vulnerabilities to these systems, and provides recommended security countermeasures to mitigate the associated risks.

Subfields: Artificial Intelligence, Civil and Structural Engineering, Control and Systems Engineering

View Paper: https://www.semanticscholar.org/paper/8060981f1e4b8283d3115d704ea65a7cebff164f

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

1. Ahmad-Reza Sadeghi
2. Lucas Davi
3. Lamine Mili
4. Wei Yu
5. Rongxing Lu
6. Raj Jain
7. Ramesh Karri
8. S. Hailes

In Civil and Structural Engineering

1. Lamine Mili
2. Cristina Alcaraz
3. C. Karlgaard

In Control and Systems Engineering

1. Lamine Mili
2. Wei Yu
3. Rongxing Lu
4. Cristina Alcaraz
5. Gerhard P. Hancke Jr.
6. Dirk Schaefer

Citations in the corpus

• The industrial internet of things (IIoT): An analysis framework (2018, background): “Widely available, low-cost Internet Protocol (IP) devices are now replacing proprietary solutions” [13]; and • “Today ICS products are mostly based on standard embedded systems platforms, applied in various devices, such as routers or cable modems, and they often use commercial off-the shelf softwar”
• Machine Learning-Based Network Vulnerability Analysis of Industrial Internet of Things (2019, background): “Our extensive study of relevant works (such as [9], [11], [12], [13], and [14]) reveals that these are the most common threats in the SCADA systems.”
• A Survey on Industrial Internet of Things: A Cyber-Physical Systems Perspective (2018, methodology): “In addition, NIST released standards regarding industrial wireless systems and industrial control systems, among others, which play critical roles in I-IoT [35], [80].”
• Security of smart manufacturing systems (2018, background): “There are number of special guidelines to guide the security of industrial systems The National Institute of Standards and Technology (NIST) special publication NIST SP 800-82, Guide to Industrial Control Systems (ICS) [67], guides the industrial control sector on how to achieve security of SCADA sy”
• A Survey of IoT-Enabled Cyberattacks: Assessing Attack Paths to Critical Infrastructures and Services (2018, background): “Security and privacy challenges in industrial IoT are also examined by the National Institute of Standards and Technology (NIST) special publication 800-82 [30] whereas Miller and Rowe [26] also provide a review specific to industrial systems.”
• On the Definition of Cyber-Physical Resilience in Power Systems (2015, background): “Some of the cyber vulnerabilities in smart grids [65,66].”
• The Cybersecurity Landscape in Industrial Control Systems (2016, background): “4) Network Layer: Vulnerabilities can be introduced into the ICS network in different ways [1]: a) firewalls (that protect devices on a network by monitoring and controlling communication packets using filtering policies); b) modems (that convert between serial digital data and a signal suitable for”
• Review of Security Issues in Industrial Networks (2013, neutral): “1 (inspired by [1] and [2]) shows for a typical situation.”
• A survey of cyber security management in industrial control systems (2015, background): “NIST also provides supplementary guidance on the application of FISMA to industrial control systems [150]; interested readers are referred to NIST SP 800-82 Appendix E [185] for details about the relationships between FISMA and industrial control systems.”
• A review of cyber security risk assessment methods for SCADA systems (2016, methodology): “Copyright a n d m o r al right s for p u blications m a d e available in ORCA a r e r e t ain e d by t h e copyrig ht hold e rs. Introduction A Supervisory Control and Data Acquisition (SCADA) system is a type of Industrial Control System (ICS).”
• DeepFed: Federated Deep Learning for Intrusion Detection in Industrial Cyber–Physical Systems (2020, background): “…technology through the Internet of Things raises new challenges for control systems security ,” and also by the U.S. Department of Commerce in the NIST Guide to ICS security [13], stating that “ cybersecurity is essential to the safe and reliable operation of modern industrial processes.””
• Security-Oriented Cloud Platform for SOA-Based SCADA (2015, methodology): “From the above, there are clearly a set of major hindrances to accomplishing secure SCADA-based critical infrastructure: Role based access control and different views on how systems should be configured, viewed and used [7], need to be fulfilled in order to securely use the system and current SOA 20”
• Software-defined cloud manufacturing for industry 4.0 (2016, background): “This OT/IT integration movement is currently happening in large scale across numerous industries, and it provides a technological alignment with the needs of future smart manufacturing systems and Industry 4.0 [12,13].”