Abstract:An attack taxonomy offers a consistent and structured classification scheme to systematically understand, identify, and classify cybersecurity threat attributes. However, existing taxonomies only focus on a narrow range of attacks and limited threat attributes, lacking a comprehensive characterization of manufacturing cybersecurity threats. There is little to no focus on characterizing threat actors and their intent, specific system and machine behavioral deviations introduced by cyberattacks, system-level and operational implications of attacks, and potential countermeasures against those attacks. To close this pressing research gap, this work proposes a comprehensive attack taxonomy for a holistic understanding and characterization of cybersecurity threats in manufacturing systems. Specifically, it introduces taxonomical classifications for threat actors and their intent and potential alterations in system behavior due to threat events. The proposed taxonomy categorizes attack methods/vectors and targets/locations and incorporates operational and system-level attack impacts. This paper also presents a classification structure for countermeasures, provides examples of potential countermeasures, and explains how they fit into the proposed taxonomical classification. Finally, the implementation of the proposed taxonomy is illustrated using two realistic scenarios of attacks on typical smart manufacturing systems, as well as several real-world cyber-physical attack incidents and academic case studies. The developed manufacturing attack taxonomy offers a holistic view of the attack chain in manufacturing systems, starting from the attack launch to the possible damages and system behavior changes within the system. Furthermore, it guides the design and development of appropriate protective and detective countermeasures by leveraging the attack realization through observed system deviations.

Taxonomy of Attacks on Open-Source Software Supply Chains

Journey to the Center of Software Supply Chain Attacks

Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks

Software supply chain: review of attacks, risk assessment strategies and security controls

Assessing the Threat Level of Software Supply Chains with the Log Model

GoSurf: Identifying Software Supply Chain Attack Vectors in Go

Software Supply Chain Risk Assessment Framework

Investigating Novel Approaches to Defend Software Supply Chain Attacks

Software Supply Chain Attacks, a Threat to Global Cybersecurity: SolarWinds’ Case Study

Taxonomy for Cybersecurity Threat Attributes and Countermeasures in Smart Manufacturing Systems

OSPtrack: A Labeled Dataset Targeting Simulated Execution of Open-Source Software

Mining Threat Intelligence about Open-Source Projects and Libraries from Code Repository Issues and Bug Reports

How hard can it be? Quantifying MITRE attack campaigns with attack trees and cATM logic

Open Source Software: An Approach to Controlling Usage and Risk in Application Ecosystems

Towards Using Source Code Repositories to Identify Software Supply Chain Attacks

Developers Are Victims Too : A Comprehensive Analysis of The VS Code Extension Ecosystem

Survey on Architectural Attacks: A Unified Classification and Attack Model

SoK: A Defense-Oriented Evaluation of Software Supply Chain Security

Contrasting global approaches for identifying and managing cybersecurity risks in supply chains

A Landscape Study of Open Source and Proprietary Tools for Software Bill of Materials (SBOM)