Cyber threats for operational technologies. (18th August 2020)

• Record Type: Journal Article
• Authors: Assenza, Giacomo; Faramondi, Luca; Oliva, Gabriele; Setola, Roberto
• Is Part Of: International journal of system of systems engineering. Volume 10:Number 2(2020)
• Page Start: 128
• Page End: 142
• Publication Date: 2020-08-18
• Subjects: cyber-security -- operational technology -- cyber-threat -- chemical industry -- process security -- SCADA -- supervisory control and data acquisition -- APT -- advanced persistent threats -- critical infrastructure -- ICS -- industrial control systems; 003.71
• Languages: English
• ISSNs: 1748-0671

Abstract

Most critical sectors worldwide rely on operational technology (OT) whose cybersecurity, due to the primary need of availability, results to be obsolete and inadequate. Episodes like Stuxnet, Irongate, BlackEnergy3, etc., showed that cyberattacks causing kinetic effects have become a concrete threat. This is particularly concerning in relation to the chemical process industry (CPI) as disruptions could involve the release of hazardous materials and result in catastrophic effects. So far, OT-targeted cyber-attacks are considered so complex that only sophisticated teams with significant technical and organisational resources are likely to succeed. This paper provides a critical review of the most relevant elements with a focus on the petrol-chemical sector. It will first discuss why OT is inherently insecure. It will then analyse how the cyber-threat has evolved and it will review relevant OT-targeted cyberattacks. Finally, it will introduce the concept of advanced persistent threats (APT) and discuss their characterisation and modus operandi.