Abstract:The machinery of industrial environments was connected to the Internet years ago with the scope of increasing their performance. However, this change made such environments vulnerable against cyber-attacks that can compromise their correct functioning resulting in economic or social problems. Moreover, implementing cryptosystems in the communications between operational technology (OT) devices is a more challenging task than for information technology (IT) environments since the OT networks are generally composed of legacy elements, characterized by low-computational capabilities. Consequently, implementing cryptosystems in industrial communication networks faces a tradeoff between the security of the communications and the amortization of the industrial infrastructure. Critical infrastructure (CI) refers to the industries which provide key resources for the daily social and economical development, e.g., electricity. Furthermore, a new threat to cybersecurity has arisen with the theoretical proposal of quantum computers, due to their potential ability of breaking state-of-the-art cryptography protocols, such as RSA or elliptic curve cryptography. Many global agents have become aware that transitioning their secure communications to a quantum secure paradigm is a priority that should be established before the arrival of fault-tolerance. In this article, we aim to describe the problematic of implementing post-quantum cryptography (PQC) to CI environments. For doing so, we describe the requirements for these scenarios and how they differ against IT. We also introduce classical cryptography and how quantum computers pose a threat to such security protocols. Furthermore, we introduce state-of-the-art proposals of PQC protocols and present their characteristics. We conclude by discussing the problematic of integrating PQC in industrial environments.

A Quantitative Evaluation Method for Cryptography Applications in Industrial Control Systems

Exploration of Quantum Cryptography Security Applications for Industrial Control Systems

Automatic Protocol Reverse Engineering for Industrial Control Systems with Dynamic Taint Analysis

Quantifying Cyber Attacks on Industrial MMC-HVDC Control System Using Structured Pseudospectrum

Industry Trusted Network Communication Based on Quantum Encryption

Leveraging Data Fitting and Trust Assessment to Improve the Security of Industrial Networks

Quantifying the Effects of Operational Technology or Industrial Control System based Cybersecurity Controls via CVSS Scoring

Research on Quantitative Assessment System for Relaying Protection Scheme of Digital Substation

Technical Research on Computer Network Security Automatic Evaluation

Network Security in the Industrial Control System: A Survey

Study of Security Metrics of Software System for Comparative Evaluation

Risk assessment for industrial control systems based on asymmetric connection cloud and Choquet integral

Design and Implementation of Industrial Internet Application Layer Protocol Integrating AES and RSA Encryption Algorithm

Cybersecurity in Critical Infrastructures: A Post-Quantum Cryptography Perspective

Cyber Security Issues of Critical Components for Industrial Control System

Security for Industrial Communication Systems

Towards Quantifying the (in)security of Networked Systems.

Cyber Security Risk Assessment Method for SCADA of Industrial Control Systems

Thinking about the application of commercial cryptography in intelligent connected vehicles

Power Information Systems Security: Modeling and Quantitative Evaluation