Abstract:With the rapid development of functional requirements in the emerging Industry 4.0 era, modern industrial control systems (ICSs) are no longer isolated islands, making them more vulnerable to various cyberattack threats. Cyberattacks on ICSs may have disruptive consequences, such as significant social and economic losses. To proactively address the security issue of ICSs, this article presents a unified architectural approach from the perspectives of cyberthreats on ICSs, security-related ICS technologies, and methods for ICSs. It incorporates secure networks, secure control systems, secure physical processes, and their interactions seamlessly into a unified framework. To increase the resistance of ICSs against intrusions, the network security in our architectural approach is to secure the data in motion through the integration of secure network architecture, secure industrial network protocols, and secure end-to-end communications. The protection of control systems in our architectural approach is risk-based and hierarchical and encompasses prevention- and tolerance-centric defenses. It provides a layer-by-layer defense so that an acceptable level of cybersecurity risk is achieved and maintained. Aiming to maintain the stable operation of physical ICS processes, the secure control in our architectural approach implements a security process against process-aware attacks through a resilient safety control scheme. The global and systematic architectural approach presented in this article for the ICS cybersecurity will help facilitate the design and implementation of cyberattack-resilient ICSs in the networked world. For further development of ICS security technologies, emerging challenges are identified and discussed to motivate future research efforts.

Research on Attack Mechanism of Network Intrusion in Industrial Control System

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Development of Security Protection Technologies for Industrial Control System

Network Security in the Industrial Control System: A Survey

Cyber Security Issues of Critical Components for Industrial Control System

An Enhanced Multi-Stage Semantic Attack Against Industrial Control Systems

Threat and defense of new ransomware worm in industrial control system

Kill Chain for Industrial Control System

Industrial Control Systems: Cyberattack trends and countermeasures

Survey on Industrial Control Protocol Security Research

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems

Looking back to look forward: Lessons learnt from cyber-attacks on Industrial Control Systems

Vulnerabilities and Attacks Against Industrial Control Systems and Critical Infrastructures

Characteristic Insights on Industrial Cyber Security and Popular Defense Mechanisms

Vulnerability Assessment of Industrial Control System with an Improved CVSS

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

Research on Industrial Control Devices Flaw Discovery Technology

A Survey of Industrial Control System Devices on the Internet

A Survey on the Recent Development of Securing the Networked Control Systems

An Efficient Tool for Industrial Control System Security Analysis