Abstract:Industrial control systems (ICS) play a vital role in monitoring and controlling the plants like power grids, oil and gas industries, manufacturing industries, and nuclear power plants. Present research and development in information and communication technologies have changed the domains of industrial control systems from traditional electromagnetic to network- based digital systems. This domain shift has created better interfaces for communication between physical processes and the control units. Eventually, making the complex process of monitoring and controlling the industries easier, with the help of internet connections and computing technologies. The field instruments such as sensors and actuators and the physical processes in industries are controlled and monitored by programmable logic controllers (PLC), remote telemetric units (RTU), and supervisory control and data acquisition systems (SCADA) with the help of communication protocols. The seamless integration of the information technologies (IT) and operational technologies (OT) make the management of the industrial environment foster. However, the inclusion of new technologies that increase the number of internet connections, the new communication protocols, and interfaces that run on open-source software, brings up new threats and challenges in addition to existing vulnerabilities in these classical legacy-based heterogeneous hardware and software systems. Due to the increase in the number of security incidents on critical infrastructures, the security considerations for SCADA systems/ICS are gaining interest among researchers. In this paper, we provide a description of SCADA/ICS components, architecture, and communication protocols. Additionally, we discuss details of existing vulnerabilities in hardware, software, and communication protocols. Further, we highlight some prominent security incidents and their motives behind them. We analyse the existing state of OT and IT security in SCADA systems by classifying the SCADA components among them. Finally, we provide security recommendations based on current trends and also discuss open research problems in SCADA security.

Securing Industrial Control Systems: Components, Cyber Threats, and Machine Learning-Driven Defense Strategies

Machine learning in industrial control system (ICS) security: current landscape, opportunities and challenges

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Cybersecurity for Industrial Control Systems: A Survey

Cybersecurity in industrial control systems: Issues, technologies, and challenges

Using machine learning to detect network intrusions in industrial control systems: a survey

Security in Supervisory Control and Data Acquisition (SCADA) based Industrial Control Systems: Challenges and Solutions

Survey on Intrusion Detection Systems Based on Machine Learning Techniques for the Protection of Critical Infrastructure

Security issues in SCADA based industrial control systems

Machine Learning in Industrial Control System Security: A Survey

Machine learning for intrusion detection in industrial control systems: challenges and lessons from experimental evaluation

A Survey of Cyber Security and Safety in Industrial Control Systems

Development of Security Protection Technologies for Industrial Control System

Machine Learning Methods for Industrial Protocol Security Analysis: Issues, Taxonomy, and Directions.

Cyber Security Issues of Critical Components for Industrial Control System

A New Perspective Towards the Development of Robust Data-Driven Intrusion Detection for Industrial Control Systems

Looking back to look forward: Lessons learnt from cyber-attacks on Industrial Control Systems

Network Security in the Industrial Control System: A Survey

Industrial Control Systems: Cyberattack trends and countermeasures

Techniques for Enhancing Security in Industrial Control Systems

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems