Developing Training Research to Improve Cyber Defense of Industrial Control Systems. (September 2018)

• Record Type: Journal Article
• Authors: Canham, Matthew; Fiore, Stephen M.; Caulkins, Bruce D.
• Is Part Of: Proceedings of the Human Factors and Ergonomics Society ... Annual Meeting. Volume 62:Part 1(2018)
• Page Start: 1439
• Page End: 1443
• Publication Date: 2018-09
• Subjects: Human engineering -- Congresses; 620.8205
• DOI: 10.1177/1541931218621327
• Languages: English
• ISSNs: 1541-9312

Abstract

Cyber-attacks are a common aspect of modern life. While cyber based attacks can expose private information or shut down online services, some of the most potentially dangerous attacks change the sensor and control data utilized by Industrial Control Systems for the intended purpose of causing severe damage to the technical processes that these systems control. The damage caused by the Stuxnet worm is one of the most infamous examples of this type of attack. Because only the most advanced levels of adversaries are able to mount successful attacks against these systems, detecting them is extremely challenging. Automated detection systems have not yet evolved to the point of being capable of consistently and successfully detecting these attacks, and for this reason, human operators will need to be involved in Industrial Control Systems protection for the foreseeable future. We propose several potential training-based solutions to aid the defense of these systems.