Abstract:With the rapid development of functional requirements in the emerging Industry 4.0 era, modern industrial control systems (ICSs) are no longer isolated islands, making them more vulnerable to various cyberattack threats. Cyberattacks on ICSs may have disruptive consequences, such as significant social and economic losses. To proactively address the security issue of ICSs, this article presents a unified architectural approach from the perspectives of cyberthreats on ICSs, security-related ICS technologies, and methods for ICSs. It incorporates secure networks, secure control systems, secure physical processes, and their interactions seamlessly into a unified framework. To increase the resistance of ICSs against intrusions, the network security in our architectural approach is to secure the data in motion through the integration of secure network architecture, secure industrial network protocols, and secure end-to-end communications. The protection of control systems in our architectural approach is risk-based and hierarchical and encompasses prevention- and tolerance-centric defenses. It provides a layer-by-layer defense so that an acceptable level of cybersecurity risk is achieved and maintained. Aiming to maintain the stable operation of physical ICS processes, the secure control in our architectural approach implements a security process against process-aware attacks through a resilient safety control scheme. The global and systematic architectural approach presented in this article for the ICS cybersecurity will help facilitate the design and implementation of cyberattack-resilient ICSs in the networked world. For further development of ICS security technologies, emerging challenges are identified and discussed to motivate future research efforts.

Vulnerability Assessment for ICS System Based on Zero-day Attack Graph

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

Enhancing Industrial Control Network Security Through Vulnerability Detection and Attack Graph Analysis

Vulnerability Assessment of Industrial Control System with an Improved CVSS

ICScope: Detecting and Measuring Vulnerable ICS Devices Exposed on the Internet.

From Exposed to Exploited: Drawing the Picture of Industrial Control Systems Security Status in the Internet Age.

Risk Based Vulnerability Assessment for Hvdc Transmission System

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Leveraging Data Fitting and Trust Assessment to Improve the Security of Industrial Networks

Research on Attack Mechanism of Network Intrusion in Industrial Control System

Zero-Parameter-Information Data Integrity Attacks and Countermeasures in IoT-Based Smart Grid

Automatic Generation of Attack Strategy for Multiple Vulnerabilities Based on Domain Knowledge Graph

RISK-BASED VULNERABILITY ASSESSMENT IN COMPLEX POWER SYSTEMS

Network Security Situation Assessment Based on Attack Graph Techniques

Vulnerability Analysis and Critical Areas Identification of the Power Systems under Terrorist Attacks

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems

Risk Assessment Graphs: Utilizing Attack Graphs for Risk Assessment

Vulnerability Detection of ICS Protocols Via Cross-State Fuzzing.

Research on Automatic Generation and Analysis Technology of Network Attack Graph

Computer Network System Security Assessment Method.