Towards establishing a security engineered SCADA framework. Issue 1 (2nd January 2019)

• Record Type: Journal Article
• Authors: Hopkins, Stephen; Kalaimannan, Ezhil
• Is Part Of: Journal of cyber security technology. Volume 3:Issue 1(2019)
• Page Start: 47
• Page End: 59
• Publication Date: 2019-01-02
• Subjects: SCADA -- security -- Industrial Control Systems (ICS) -- vulnerability analysis -- encapsulation framework; Computer security -- Periodicals; Data encryption (Computer science) -- Periodicals; 005.805
• DOI: 10.1080/23742917.2019.1590920
• Languages: English
• ISSNs: 2374-2917

Abstract

ABSTRACT: Today, Supervisory Control and Data Acquisition (SCADA) devices find their use across a wide range of industries. SCADA applications include industrial, infrastructure, facility, and unique private systems. The evolution of SCADA to interconnect multiple remote locations and networks, communicate over Transmission Control Protocol/Internet Protocol (TCP/IP) on Local Area Networks (LAN) connected to the internet, and integrate with Internet of Things (IoT) and other Internet Enabled Devices (IED) extends vulnerability exposure risks to the internet and presents a greater need for security considerations for design, implementation, and use. The research in this paper presents the SCADA vulnerability baseline and examines mitigation through an integrating and encapsulating Framework We present a securely engineered SCADA framework which provides an improvement in security, performance and return of investment for industrial applications.