Abstract:Within the last decade, Security became a major focus in the traditional IT-Industry, mainly through the interconnection of systems and especially through the connection to the Internet. This opened up a huge new attack surface, which resulted in major takedowns of legitimate services and new forms of crime and destruction. This led to the development of a multitude of new defense mechanisms and strategies, as well as the establishing of Security procedures on both, organizational and technical level. Production systems have mostly remained in isolation during these past years, with security typically focused on the perimeter. Now, with the introduction of new paradigms like Industry 4.0, this isolation is questioned heavily with Physical Production Systems (PPSs) now connected to an IT-world resulting in cyber-physical systems sharing the attack surface of traditional web based interfaces while featuring completely different goals, parameters like lifetime and safety, as well as construction. In this work, we present an outline on the major security challenges faced by cyber-physical production systems. While many of these challenges harken back to issues also present in traditional web based IT, we will thoroughly analyze the differences. Still, many new attack vectors appeared in the past, either in practical attacks like Stuxnet, or in theoretical work. These attack vectors use specific features or design elements of cyber-physical systems to their advantage and are unparalleled in traditional IT. Furthermore, many mitigation strategies prevalent in traditional IT systems are not applicable in the industrial world, e.g., patching, thus rendering traditional strategies in IT-Security unfeasible. A thorough discussion of the major challenges in CPPS-Security is thus required in order to focus research on the most important targets.

Contradictions Identification of Safety and Security Requirements for Industrial Cyber–Physical Systems

Identification of ICS Security Risks Toward the Analysis of Packet Interaction Characteristics Using State Sequence Matching Based on SF-FSM

Privacy and Security of Cyberphysical Systems

Stackelberg Interdependent Security Game in Distributed and Hierarchical Cyber-Physical Systems

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Conflict Analysis and Resolution of Safety and Security Boundary Conditions for Industrial Control Systems

Deriving Cyber-security Requirements for Cyber Physical Systems

Cyberphysical Security for Industrial Control Systems Based on Wireless Sensor Networks

Challenges in Developing Software for Cyber-Physical Systems

A Survey of Cyber Security and Safety in Industrial Control Systems

Assessing Cyber-Physical Security in Industrial Control Systems

A Security Posture Assessment of Industrial Control Systems Based on Evidential Reasoning and Belief Rule Base

Problems and Solutions Regarding Generalized Functional Safety in Cyberspace

Cyber-Physical Systems Security -- A Survey

Analyzing Software Requirements for Cyber Physical Systems

Risk-Based Scheduling of Security Tasks in Industrial Control Systems With Consideration of Safety

Security Challenges in Cyber-Physical Production Systems

Analyzing Early Requirements of Cyber-physical Systems Through Structure and Goal Modeling

A survey on attack detection, estimation and control of industrial cyber–physical systems

Security Perspective Analysis of Industrial Cyber Physical Systems (I-CPS): A Decade-wide Survey

Identifying Security-Critical Cyber-Physical Components in Industrial Control Systems