Cyber security risk assessment for SCADA and DCS networks

The growing dependence of critical infrastructures and industrial automation on interconnected physical and cyber-based control systems has resulted in a growing and previously unforeseen cyber security threat to supervisory control and data acquisition (SCADA) and distributed control systems (DCSs)...

Full description

Saved in:

Bibliographic Details
Published in:	ISA transactions Vol. 46; no. 4; pp. 583 - 594
Main Authors:	Ralston, P.A.S., Graham, J.H., Hieb, J.L.
Format:	Journal Article
Language:	English
Published:	Kidlington Elsevier Ltd 01-10-2007 Elsevier
Subjects:	Applied sciences Computer science; control theory; systems Control systems Control theory. Systems DCS Exact sciences and technology General equipment and techniques Instruments, apparatus, components and techniques common to several branches of physics and astronomy Modelling and identification Physics Process control. Computer integrated manufacturing Risk analysis SCADA Servo and control equipment; robots Vulnerability assessment Control systems Risk analysis DCS Vulnerability assessment SCADA Tree(graph) Probabilistic approach Data acquisition Process control Manager Data acquisition system SCADA systems Distributed control Metric Risk management Supervision
Online Access:	Get full text
Tags:	Add Tag No Tags, Be the first to tag this record!

Description
Summary:	The growing dependence of critical infrastructures and industrial automation on interconnected physical and cyber-based control systems has resulted in a growing and previously unforeseen cyber security threat to supervisory control and data acquisition (SCADA) and distributed control systems (DCSs). It is critical that engineers and managers understand these issues and know how to locate the information they need. This paper provides a broad overview of cyber security and risk assessment for SCADA and DCS, introduces the main industry organizations and government groups working in this area, and gives a comprehensive review of the literature to date. Major concepts related to the risk assessment methods are introduced with references cited for more detail. Included are risk assessment methods such as HHM, IIM, and RFRM which have been applied successfully to SCADA systems with many interdependencies and have highlighted the need for quantifiable metrics. Presented in broad terms is probability risk analysis (PRA) which includes methods such as FTA, ETA, and FEMA. The paper concludes with a general discussion of two recent methods (one based on compromise graphs and one on augmented vulnerability trees) that quantitatively determine the probability of an attack, the impact of the attack, and the reduction in risk associated with a particular countermeasure.
Bibliography:	ObjectType-Article-1 SourceType-Scholarly Journals-1 ObjectType-Feature-2 content type line 23
ISSN:	0019-0578 1879-2022
DOI:	10.1016/j.isatra.2007.04.003