A model for security management of SCADA systems

Anjos, Ivano Miranda dos; Brito, Agostinho M.; Pires, Paulo F.

doi:10.1109/etfa.2008.4638433

Cited by 5 publications

(3 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Our proposal can also be viewed as complementary to existing approaches and can be implemented together with other techniques that also address the resilience of industrial systems [3,4,18], but do not target more sophisticated attacks. Finally, we also mention that the proposed segmentation methodology can be combined with techniques that ensure the security of industrial systems [1,12], leading to installations that are both secure and resilient against cyber threats. The study reported in this paper is a first step in our work towards the development of a method that maximizes the resilience of physical processes with network segmentation.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

An Experimental Study on the Impact of Network Segmentation to the Resilience of Physical Processes

Genge

Siaterlis

2012

Networking 2012

View full text Add to dashboard Cite

Abstract. The fact that modern Networked Industrial Control Systems (NICS) depend on Information and Communication Technologies (ICT) is well known. Although many studies have focused on the security of NICS, today we still lack a proper understanding of the impact that network design choices have on the resilience of NICS, e.g., a network architecture using VLAN segmentation. In this paper we investigate the impact of process control network segmentation on the resilience of physical processes. We consider an adversary capable of reprogramming the logic of control hardware in order to disrupt the normal operation of the physical process. Our analysis that is based on the Tennessee-Eastman chemical process proves that network design decisions significantly increase the resilience of the process using as resilience metric the time that the process is able to run after the attack is started, before shutting down. Therefore a resilience-aware network design can provide a tolerance period of several hours that would give operators more time to intervene, e.g., switch OFF devices or disconnect equipment in order to reduce damages.

show abstract

Section: Discussionmentioning

confidence: 99%

“…Such approaches rely on PLCs running legitimate control code with incorporated countermeasures, that could be rewritten by malware. The proposed segmentation methodology could also be combined with techniques that ensure the security of industrial systems [1,12], leading to a system that is both secure and resilient against cyber threats.…”

Section: Related Workmentioning

confidence: 99%

An Experimental Study on the Impact of Network Segmentation to the Resilience of Physical Processes

Genge

Siaterlis

2012

Networking 2012

View full text Add to dashboard Cite

show abstract

“…[7] presented a framework for assessing security risks in cyberphysical systems, which is designed to benchmark security risks when inter-dependencies of physical and logical components may result in correlated failures. dos Anjos et al [8] leveraged a tool called Ponder to create a policy-based ICS security management 235 model enabling formal policy specification, rule validation, policy distribution and application, as well as conformity check with current standards on information security of critical systems. Hieb et al [9] proposed an ontology framework that allows formal representation of process control systems, together with a fault 240 diagnosis algorithm capable of identifying process faults induced by a cyber intrusion.…”

Section: Related Workmentioning

confidence: 99%