Abstract:With the rapid development of functional requirements in the emerging Industry 4.0 era, modern industrial control systems (ICSs) are no longer isolated islands, making them more vulnerable to various cyberattack threats. Cyberattacks on ICSs may have disruptive consequences, such as significant social and economic losses. To proactively address the security issue of ICSs, this article presents a unified architectural approach from the perspectives of cyberthreats on ICSs, security-related ICS technologies, and methods for ICSs. It incorporates secure networks, secure control systems, secure physical processes, and their interactions seamlessly into a unified framework. To increase the resistance of ICSs against intrusions, the network security in our architectural approach is to secure the data in motion through the integration of secure network architecture, secure industrial network protocols, and secure end-to-end communications. The protection of control systems in our architectural approach is risk-based and hierarchical and encompasses prevention- and tolerance-centric defenses. It provides a layer-by-layer defense so that an acceptable level of cybersecurity risk is achieved and maintained. Aiming to maintain the stable operation of physical ICS processes, the secure control in our architectural approach implements a security process against process-aware attacks through a resilient safety control scheme. The global and systematic architectural approach presented in this article for the ICS cybersecurity will help facilitate the design and implementation of cyberattack-resilient ICSs in the networked world. For further development of ICS security technologies, emerging challenges are identified and discussed to motivate future research efforts.

ICN-based Communication Security Service Mechanism for Smart Industrial Control

Industrial control network security situation awareness based on improved C-SVC

Integrated computation, communication and control: towards next revolution in information technology

Development of Security Protection Technologies for Industrial Control System

Intelligent Community Control Network Based on Wireless IP Service

Research and Implementation of Network Security Cooperative Defense System

Data Security Transmission Mechanism in Industrial Networked Control Systems Against Deception Attack

A Name-Based Secure Communication Mechanism for Smart Grid Employing Wireless Networks.

Content-based Deep Communication Control for Networked Control System.

Session-based Access Control in Information-Centric Networks: Design and Analyses.

A Security Protection Approach Based on Software Defined Network for Inter-Area Communication in Industrial Control Systems

Network Security in the Industrial Control System: A Survey

Security for the Industrial IoT: The Case for Information-Centric Networking

An IIoT-Based Networked Industrial Control System Architecture to Secure Industrial Applications

A Dual-Channel Secure Transmission Scheme for Internet-Based Networked Control Systems

Exploiting ICN for Realizing Service-Oriented Communication in IoT

Research on improvement of information-centric networking architecture for NetInf security

ICCN: Identity-based centralized control network

Characteristic Insights on Industrial Cyber Security and Popular Defense Mechanisms

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems

Integrated Architecture for Networking and Industrial Internet Identity