Abstract:Industrial Control Systems (ICSs) are widely used in critical infrastructures that face various cyberattacks causing physical damage. With the increasing integration of the ICSs and information technology (IT), ensuring the security of ICSs is of paramount importance. In an ICS, cyberattacks exploit vulnerabilities to compromise sensors and controllers, aiming to cause physical damage. Maliciously accessing different components poses varying risks, highlighting the importance of identifying high-risk cyberattacks. This aids in designing effective detection schemes and mitigation strategies. This paper proposes an optimization-based cyber-risk assessment framework that integrates cyber and physical systems of ICSs. The framework models cyberattacks with varying expertise and knowledge by 1) maximizing physical impact in terms of failure time of the physical system, 2) quickly accessing the sensors and controllers in the cyber system while exploiting limited vulnerabilities, 3) avoiding detection in the physical system, and 4) complying with the cyber and physical restrictions. These objectives enable us to jointly model the interactions between the cyber and physical systems and study the critical cyberattacks that cause the highest impact on the physical system under certain resource constraints. Our framework serves as a tool to understand the vulnerabilities of an ICS with a holistic consideration of cyber and physical systems and their interactions and assess the risk of existing detection schemes by generating the worst-case attack strategies. We illustrate and verify the effectiveness of our proposed method in a numerical and a case study. The results show that a worst-case strategic attacker causes almost 19% further acceleration in the failure time of the physical system while remaining undetected compared to a random attacker.

Measuring cyber-physical security in industrial control systems via minimum-effort attack strategies

Assessing Cyber-Physical Security in Industrial Control Systems

Identifying Security-Critical Cyber-Physical Components in Industrial Control Systems

A Systematic Analysis of Security Metrics for Industrial Cyber–Physical Systems

An Integrated Cyber-Physical Risk Assessment Framework for Worst-Case Attacks in Industrial Control Systems

Assessing the Physical Impact of Cyberattacks on Industrial Cyber-Physical Systems

Security Metrics in Industrial Control Systems

Vulnerabilities and Attacks Against Industrial Control Systems and Critical Infrastructures

Attack Surface Metrics and Privilege-based Reduction Strategies for Cyber-Physical Systems

Towards Low-Barrier Cybersecurity Research and Education for Industrial Control Systems

Industrial Control Systems Security Validation Based on MITRE Adversarial Tactics, Techniques, and Common Knowledge Framework

Optimal security hardening over a probabilistic attack graph: a case study of an industrial control system using the CySecTool tool

Understanding Indicators of Compromise against Cyber-Attacks in Industrial Control Systems: A Security Perspective

The industrial control system cyber defence triage process

Assessment of Cyber-Physical Intrusion Detection and Classification for Industrial Control Systems

Leveraging Data Fitting and Trust Assessment to Improve the Security of Industrial Networks

AI-based Identification of Most Critical Cyberattacks in Industrial Systems

Dynamic Vulnerability Criticality Calculator for Industrial Control Systems

On the use of MiniCPS for conducting rigorous security experiments in Software-Defined Industrial Control Systems

An Analytics Framework for Heuristic Inference Attacks against Industrial Control Systems