Cybersecurity of Industrial Cyber-Physical Systems: A Review

Abstract

Industrial cyber-physical systems (ICPSs) manage critical infrastructures by controlling the processes based on the “physics” data gathered by edge sensor networks. Recent innovations in ubiquitous computing and communication technologies have prompted the rapid integration of highly interconnected systems to ICPSs. Hence, the “security by obscurity” principle provided by air-gapping is no longer followed. As the interconnectivity in ICPSs increases, so does the attack surface. Industrial vulnerability assessment reports have shown that a variety of new vulnerabilities have occurred due to this transition. Although there are existing surveys in this context, very little is mentioned regarding the outputs of these reports. While these reports show that the most exploited vulnerabilities occur due to weak boundary protection, these vulnerabilities also occur due to limited or ill defined security policies. However, current literature focuses on intrusion detection systems (IDS), network traffic analysis (NTA) methods, or anomaly detection techniques. Hence, finding a solution for the problems mentioned in these reports is relatively hard. We bridge this gap by defining and reviewing ICPSs from a cybersecurity perspective. In particular, multi-dimensional adaptive attack taxonomy is presented and utilized for evaluating real-life ICPS cyber incidents. Finally, we identify the general shortcomings and highlight the points that cause a gap in existing literature while defining future research directions.

Real-Time Performance of Industrial IoT Communication Technologies: A Review

“…b) Remote Control: Industrial Control Systems (ICS) can be changed to make use of the IIoT paradigm by physically shifting controlling entities away from the real-time device, possibly outside of the plant floor [18]. To this end, the originally existing air gap between ICS and external networks has to be bridged [15]. Besides the resulting security implications, this also means opening up real-time control systems to conventional IP networks and protocols.…”

A Comparative Study of Time Series Anomaly Detection Models for Industrial Control Systems

“…Other surveys have focused on defenses of different domains in cyber-physical systems, such as exploring vulnerabilities in smart grids [ 31 , 32 , 33 , 34 ], increasing attention to risks in medical devices [ 35 , 36 , 37 ], and addressing privacy and security issues in general systems [ 38 , 39 , 40 , 41 ]. Kayan et al [ 42 ] presented an interesting survey that reviewed the cybersecurity of overall industrial systems and infrastructures, such as Industrial Control Systems (ICS), Industrial cyber-physical systems (ICPSs), Industrial Internet of Things (IIoT), and Industrial Wireless Sensor Networks (IWSNs). However, his survey work focused on proposing a framework to demonstrate current challenges, define systems’ unique characteristics, analyze communication protocols, present an attack taxonomy, and evaluate real-life ICS cyber incidents.…”

Digital twin inception in the Era of industrial metaverse

“…• 3C architecture: The 3C CPS architecture integrates computation, communication, and control as key elements to help meet the goals of smart industries. These 3C CPS components are crucial for integrating human, physical, and cyber components in smart industries (Kayan et al, 2022). • 5C architecture: The 5C CPS architecture consists of levels for smart connection, conversion, cyber, cognition, and configuration.…”