Abstract:Increasingly Industrial Control Systems (ICS) systems are being connected to the Internet to minimise the operational costs and provide additional flexibility. These control systems such as the ones used in power grids, manufacturing and utilities operate continually and have long lifespans measured in decades rather than years as in the case of IT systems. Such industrial control systems require uninterrupted and safe operation. However, they can be vulnerable to a variety of attacks, as successful attacks on critical control infrastructures could have devastating consequences to the safety of human lives as well as a nation’s security and prosperity. Furthermore, there can be a range of attacks that can target ICS and it is not easy to secure these systems against all known attacks let alone unknown ones. In this paper, we propose a software enabled security architecture using Software Defined Networking (SDN) and Network Function Virtualisation (NFV) that can enhance the capability to secure industrial control systems. We have designed such an SDN/NFV enabled security architecture and developed a Control System Security Application (CSSA) in SDN Controller for enhancing security in ICS by achieving real time situational awareness and dynamic policy-driven decision making across the network infrastructure. In particular, CSSA can be used for establishing secure path for end-to-end communication between devices and also deal against certain specific attacks namely denial of service attacks, from unpatched vulnerable control system components and securing the communication flows from the legacy devices that do not support any security functionality. We also discuss how CSSA provides reliable paths for safety critical messages in control systems. We discuss the prototype implementation of the proposed architecture and the results obtained from our analysis.

Protection architecture of endogenous safety and security for industrial control systems

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Insights on Cooperative Defense for Multiple Industrial Security Technologies

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems

Towards a Framework for Cyber Attack Impact Analysis of Electric Cyber Physical Systems.

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

A Survey of Cyber Security and Safety in Industrial Control Systems

Research on the Security Defense Architecture of the Closed-source Power Industrial Control System

Cyber Security Issues of Critical Components for Industrial Control System

Cyberphysical Security for Industrial Control Systems Based on Wireless Sensor Networks

Techniques for Enhancing Security in Industrial Control Systems

An Open Architecture for Information Communication Systems for Multi-Level Electric Power Control Centers.

Cybersecurity in industrial control systems: Issues, technologies, and challenges

Position Paper: On Using Trusted Execution Environment to Secure COTS Devices for Accessing Industrial Control Systems

Research on Information Security Protection System of Industrial Control System

Software Enabled Security Architecture for Counteracting Attacks in Control Systems

Network Security in the Industrial Control System: A Survey

Conflict Analysis and Resolution of Safety and Security Boundary Conditions for Industrial Control Systems

Toward the Science of Industrial Control Systems Security and Resiliency

Cybersafety: A System-theoretic Approach to Identify Cyber-vulnerabilities & Mitigation Requirements in Industrial Control Systems

Securing Industrial Control Systems: Components, Cyber Threats, and Machine Learning-Driven Defense Strategies