Abstract:With the rapid development of functional requirements in the emerging Industry 4.0 era, modern industrial control systems (ICSs) are no longer isolated islands, making them more vulnerable to various cyberattack threats. Cyberattacks on ICSs may have disruptive consequences, such as significant social and economic losses. To proactively address the security issue of ICSs, this article presents a unified architectural approach from the perspectives of cyberthreats on ICSs, security-related ICS technologies, and methods for ICSs. It incorporates secure networks, secure control systems, secure physical processes, and their interactions seamlessly into a unified framework. To increase the resistance of ICSs against intrusions, the network security in our architectural approach is to secure the data in motion through the integration of secure network architecture, secure industrial network protocols, and secure end-to-end communications. The protection of control systems in our architectural approach is risk-based and hierarchical and encompasses prevention- and tolerance-centric defenses. It provides a layer-by-layer defense so that an acceptable level of cybersecurity risk is achieved and maintained. Aiming to maintain the stable operation of physical ICS processes, the secure control in our architectural approach implements a security process against process-aware attacks through a resilient safety control scheme. The global and systematic architectural approach presented in this article for the ICS cybersecurity will help facilitate the design and implementation of cyberattack-resilient ICSs in the networked world. For further development of ICS security technologies, emerging challenges are identified and discussed to motivate future research efforts.

A Zoning-Based Secure Control Approach Against Actuator Attacks in Industrial Cyber-Physical Systems

Secure Estimation And Event-Triggered Control For Cyber-Physical Systems Based On Intermediate Estimator

Adaptive Resilient Control of Cyber-Physical Systems Under Actuator and Sensor Attacks

Cloud-Based Underactuated Resilient Control for Cyber-Physical Systems under Actuator Attacks

Cyber-physical System Security for Networked Industrial Processes.

Composite Finite-Time Resilient Control for Cyber-Physical Systems Subject to Actuator Attacks.

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems

Adaptive Control for Cyber-Physical Systems Against Actuator Attacks

Active Security Control Approach Against DoS Attacks in Cyber-Physical Systems

Anti-saturation resilient control of cyber-physical systems under actuator attacks

Anomaly Detection Based on Zone Partition for Security Protection of Industrial Cyber-Physical Systems

Cyberattack Defense with Cyber-Physical Alert and Control Logic in Industrial Controllers

Passivity-Based Robust Control Against Quantified False Data Injection Attacks in Cyber-Physical Systems

Secure Control for Cyber-Physical Systems under Malicious Attacks

Resilient Control of Cyber-Physical Systems Against Denial-of-Service Attacks

LQ Secure Control for Cyber-Physical Systems Against Sparse Sensor and Actuator Attacks

Secure Control for Cyber–Physical Systems Subject to Aperiodic DoS Attacks

Adaptive integral sliding-mode control strategy of data-driven cyber-physical systems against a class of actuator attacks

Detection of Actuator Enablement Attacks by Petri Nets in Supervisory Control Systems

Reliable Control Policy of Cyber-Physical Systems Against a Class of Frequency-Constrained Sensor and Actuator Attacks.

Attack isolation and location for a complex network cyber-physical system via zonotope theory