What should we do? A structured review of SCADA system cyber security standards

Zhou, Xiaojun; Xu, Zhen; Wang, Liming; Chen, Kai

doi:10.1109/codit.2017.8102661

Cited by 11 publications

(5 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Reference [28] illustrates that attacks of users(such as social engineering) is a realworld threat and we need to develop better technical defenses against them, and learn how to effectively teach end users about these risks. Reference [29] gives a structured review of all the standards and shows us that all standards or regulations emphasize 'management' greatly. That is corresponding with the motto Security is 30 percent by technology, and 70 percent by management.…”

Section: Discussion and Future Networkmentioning

confidence: 99%

Inside the Closed World: User and Device Profile Analytics for SCADA Security

Zhou

Wang

et al. 2018

MATEC Web Conf.

Self Cite

View full text Add to dashboard Cite

Abstract. Attacks that use sophisticated and complex methods in-creased recently, aiming to infiltrate the Supervisory Control and Data Acquisition (SCADA) system and stay undetected. Therefore, attackers often get access to authorized permissions of SCADA and bring catastrophic damages by sending 'legitimate' control commands. Furthermore, insiders may also misuse or abuse their permissions to damage SCADA system, which is difficult to predict and protect against them. Most existing security systems employ standard signature-based or anomaly-based approaches, which are not able to identify this type of malicious activities. In this paper, we use machine learning algorithms based on Singular Values Decomposition (SVD) to create profiles of users and devices. The major contribution of this paper is providing a general process to detect anomalies, independent of specific use-cases. Suspicious actions are altered to analysts with relevant contextual information for further investigation and action. We provide detailed description of algorithms, methodology, processing of profiling and anomaly detection. Having profiles of different users and devices can provide us a baseline of normal behavior to compare against unusual behaviors. To demonstrate the proposed method, attack scenarios have been simulated at a Compressed Natural Gas (CNG) system in our lab. Experimental results illustrate that the proposed method is effective for abnormal behaviors in SCADA system.

show abstract

Section: Discussion and Future Networkmentioning

confidence: 99%

Inside the Closed World: User and Device Profile Analytics for SCADA Security

Zhou

Wang

et al. 2018

MATEC Web Conf.

Self Cite

View full text Add to dashboard Cite

show abstract

“…Zhou et al provide that cybersecurity standards, procedures, and best practices on SCADA are thoroughly reviewed. Thanks to these standards, defense theory in depth is recommended [33]. Do et al explain that cyberattacks and vulnerabilities made to the SCADA system were analyzed.…”

Section: Investigation Of Security Of Smart Gridsmentioning

confidence: 99%

Investigation of Cyber-Attack Methods and Measures in Smart Grids

Avcı

2021

Sakarya University Journal of Science

View full text Add to dashboard Cite

Smart grids have been developing rapidly with the development of technologies in recent years. In the field of critical infrastructures such as natural gas, electricity, water, and energy systems, which are among the smart grids, its use has been increasing in Turkey and all over the world in recent years. With the increase in the use of smart grids, security problems have also gained importance. Cybersecurity attacks against these networks are increasing every year. In this research study, smart cities, smart networks, and the most common cybersecurity attack methods against these systems were investigated. The studies on security in smart grids in the last 10 years have been examined and presented in a table. As a result of these researches, cyberattacks that are experienced and likely to occur in smart networks were determined. The 20 most used cyber-attack methods were analyzed. In addition, the measures that can be taken against cyber-attacks are analyzed in detail. In addition, in this article, studies on security problems in smart grids are examined and evaluated.

show abstract

“…Moreover, they have detailed devices that can be used to enable smart factory technologies. Furthermore, Derboul et al (2018) present a study of the impact of a SCADA (Zhou et al, 2017) system on the performance of production processes. The results of this study confirm the positive and direct impact of having industrial supervision in the performance of a production system.…”

Section: Related Workmentioning

confidence: 99%