Assessing and augmenting SCADA cyber security: A survey of techniques. Issue 70 (September 2017)

• Record Type: Journal Article
• Authors: Nazir, Sajid; Patel, Shushma; Patel, Dilip
• Is Part Of: Computers & security. Issue 70(2017)
• Page Start: 436
• Page End: 454
• Publication Date: 2017-09
• Subjects: Cyber defence -- Anomaly detection -- Attack tools -- Vulnerability -- Simulation -- Modelling -- SCADA; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2017.06.010
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: SCADA systems monitor and control critical infrastructures of national importance such as power generation and distribution, water supply, transportation networks, and manufacturing facilities. The pervasiveness, miniaturisations and declining costs of Internet connectivity have transformed these systems from strictly isolated to highly interconnected networks. The connectivity provides immense benefits such as reliability, scalability and remote connectivity, but at the same time exposes an otherwise isolated and secure system, to global cyber security threats. This inevitable transformation to highly connected systems thus necessitates effective security safeguards to be in place as any compromise or downtime of SCADA systems can have severe economic, safety and security ramifications. One way to ensure vital asset protection is to adopt a viewpoint similar to an attacker to determine weaknesses and loopholes in defences. Such mind sets help to identify and fix potential breaches before their exploitation. This paper surveys tools and techniques to uncover SCADA system vulnerabilities. A comprehensive review of the selected approaches is provided along with their applicability.