Abstract:With the rapid development of functional requirements in the emerging Industry 4.0 era, modern industrial control systems (ICSs) are no longer isolated islands, making them more vulnerable to various cyberattack threats. Cyberattacks on ICSs may have disruptive consequences, such as significant social and economic losses. To proactively address the security issue of ICSs, this article presents a unified architectural approach from the perspectives of cyberthreats on ICSs, security-related ICS technologies, and methods for ICSs. It incorporates secure networks, secure control systems, secure physical processes, and their interactions seamlessly into a unified framework. To increase the resistance of ICSs against intrusions, the network security in our architectural approach is to secure the data in motion through the integration of secure network architecture, secure industrial network protocols, and secure end-to-end communications. The protection of control systems in our architectural approach is risk-based and hierarchical and encompasses prevention- and tolerance-centric defenses. It provides a layer-by-layer defense so that an acceptable level of cybersecurity risk is achieved and maintained. Aiming to maintain the stable operation of physical ICS processes, the secure control in our architectural approach implements a security process against process-aware attacks through a resilient safety control scheme. The global and systematic architectural approach presented in this article for the ICS cybersecurity will help facilitate the design and implementation of cyberattack-resilient ICSs in the networked world. For further development of ICS security technologies, emerging challenges are identified and discussed to motivate future research efforts.

Research on the Security Defense Architecture of the Closed-source Power Industrial Control System

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Study on Network Security Architecture for Power Systems

Control System Security in Nuclear Power Plant

Protection architecture of endogenous safety and security for industrial control systems

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems

Research on Information Security Protection System of Industrial Control System

A Survey of Cyber Security and Safety in Industrial Control Systems

A Data-Driven Based Security Situational Awareness Framework for Power Systems

Security Protection Architecture for Power Enterprise Information Integration Based on Technology of Distributed Intrusion Tolerance with Multi-Level Defense Line

Design of an Early Warning and Security Countermeasure System for Electric Power Control Centers

Network Security in the Industrial Control System: A Survey

Research on Security Protection Framework of Power Communication Network Based on Software Defined Network

Cyberphysical Security for Industrial Control Systems Based on Wireless Sensor Networks

Cyber Security Issues of Critical Components for Industrial Control System

Neural Control Based Research of Endogenous Security Model

A Review on Cybersecurity Analysis, Attack Detection, and Attack Defense Methods in Cyber-physical Power Systems

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Research on risk prevention and control strategy of power grid CPS system based on intrusion tolerance

DSACR: A defense-based system with adaptive cyber resilience for industrial control systems