Cybersecurity Challenges in the Offshore Oil and Gas Industry: An Industrial Cyber-Physical Systems (ICPS) Perspective

Abubakar Sadiq Mohammed,Philipp Reinecke,Pete Burnap,Omer Rana,Eirini Anthi

DOI: https://doi.org/10.1145/3548691

2022-09-07

Abstract:There has been significant interest within the offshore oil and gas industry to utilise

English Else

What problem does this paper attempt to address?

Cybersecurity of Industrial Cyber-Physical Systems: A Review

Hakan Kayan,Matthew Nunes,Omer Rana,Pete Burnap,Charith Perera

DOI: https://doi.org/10.48550/arXiv.2101.03564

2021-01-10

Abstract:Industrial cyber-physical systems (ICPSs) manage critical infrastructures by controlling the processes based on the "physics" data gathered by edge sensor networks. Recent innovations in ubiquitous computing and communication technologies have prompted the rapid integration of highly interconnected systems to ICPSs. Hence, the "security by obscurity" principle provided by air-gapping is no longer followed. As the interconnectivity in ICPSs increases, so does the attack surface. Industrial vulnerability assessment reports have shown that a variety of new vulnerabilities have occurred due to this transition while the most common ones are related to weak boundary protection. Although there are existing surveys in this context, very little is mentioned regarding these reports. This paper bridges this gap by defining and reviewing ICPSs from a cybersecurity perspective. In particular, multi-dimensional adaptive attack taxonomy is presented and utilized for evaluating real-life ICPS cyber incidents. We also identify the general shortcomings and highlight the points that cause a gap in existing literature while defining future research directions.

Cryptography and Security
Cyber Physical Systems Security for Maritime Assets

Iosif Progoulakis,Paul Rohmeyer,Nikitas Nikitakos

DOI: https://doi.org/10.3390/jmse9121384

IF: 2.744

2021-12-05

Journal of Marine Science and Engineering

Abstract:The integration of IT, OT, and human factor elements in maritime assets is critical for their efficient and safe operation and performance. This integration defines cyber physical systems and involves a number of IT and OT components, systems, and functions that involve multiple and diverse communication paths that are technologically and operationally evolving along with credible cyber security threats. These cyber security threats and risks as well as a number of known security breach scenarios are described in this paper to highlight the evolution of cyber physical systems in the maritime domain and their emerging cyber vulnerabilities. Current industry and governmental standards and directives related to cyber security in the maritime domain attempt to enforce the regulatory compliance and reinforce asset cyber security integrity for optimum and safe performance with limited focus, however, in the existing OT infrastructure and systems. The use of outside-of-the-maritime industry security risk assessment tools and processes, such the API STD 780 Security Risk Assessment (SRA) and the Bow Tie Analysis methodologies, can assist the asset owner to assess its IT and OT infrastructure for cyber and physical security vulnerabilities and allocate proper mitigation measures assuming their similarities to ICS infrastructure. The application of cyber security controls deriving from the adaptation of the NIST CSF and the MITRE ATT&CK Threat Model can further increase the cyber security integrity of maritime assets, assuming they are periodically evaluated for their effectiveness and applicability. Finally, the improvement in communication among stakeholders, the increase in operational and technical cyber and physical security resiliency, and the increase in operational cyber security awareness would be further increased for maritime assets by the convergence of the distinct physical and cyber security functions as well as onshore- and offshore-based cyber infrastructure of maritime companies and asset owners.

oceanography,engineering, marine, ocean
Privacy and Security of Cyberphysical Systems

Jiming Chen,Vijay Gupta,Daniel E. Quevedo,Pietro Tesi

DOI: https://doi.org/10.1002/rnc.5051

IF: 3.8973

2020-01-01

International Journal of Robust and Nonlinear Control

Abstract:Due to advances in computing and communication technologies, there has been a growing interest in cyberphysical systems (CPS). These are systems where physical devices are monitored/controlled via embedded computers and networks. By exploiting sensing, computation, and networking capabilities, CPS are paving the way for a new generation of engineering systems, which enable automatic decision‐making processes in fields ranging from customized manufacturing and transportation to health care and energy. Integration of information technology methods with a physical system such as a power grid, transportation system, and supply chain to form a “smart” infrastructure holds the promise of greater efficiency, reliability, and sustainability. However, any such coupling introduces privacy and security issues. The “systems and control” community has contributed to the CPS agenda, addressing issues like estimation, control, and coordination under information constraints. However, a deep understanding of the privacy and security requirements in CPS and their influence on classical control‐theoretic paradigms is still missing...
Cyber Attacks on Maritime Assets and their Impacts on Health and Safety Aboard: A Holistic View

Mohammad Ammar,Irfan Ahmad Khan

2024-07-11

Abstract:There has been an unprecedented digitization drive in the industrial sector, especially in the maritime industry. The profusion of intelligent electronic devices and IOT-enabled cyber-physical systems (CPS) has helped in the efficient use of resources and increased convenience. CPS has enabled real-time remote command and control of industrial assets. Unlike the relatively isolated legacy systems, the intertwined nature of Information Technology(IT) and Operations Technology(OT) brought by Industry 4.0 has increased the complexity of the systems, thereby increasing the attack surface. This work explores the possible consequences of these attacks from a more holistic view, focusing on high-risk assets such as offshore oil rigs, offshore wind farms, and autonomous vessels. The attacks have become more aggressive with the proliferation of such technologies, disrupting the physical process, causing fire and explosion hazards, and endangering human life and environmental health. The possible attack scenarios, the attack vectors, and their physical consequences have been discussed from the perspective of personnel safety and health, along with known security breaches of such nature. To the best of the authors' knowledge, seldom has any work been done that accentuates the possible human and environmental impacts of such attacks.

Cryptography and Security,Emerging Technologies
Industrial Cybersecurity, Process Safety, and Human Factors: A 360° Approach

Chris Carpenter

DOI: https://doi.org/10.2118/0824-0079-jpt

2024-08-01

Journal of Petroleum Technology

Abstract:_ This article, written by JPT Technology Editor Chris Carpenter, contains highlights of paper OTC 35396, “Industrial Cybersecurity, Process Safety, and Human Factors: A Comprehensive 360° Approach,” by Pedro F. Vieira, Lenissa P. Hilgert, and Ilton Majerowicz, Petrobras. The paper has not been peer reviewed. Copyright 2024 Offshore Technology Conference. _ The complete paper presents an integrated view of three key areas of knowledge that are typically addressed individually—cybersecurity, process safety, and human factors—from the perspective of cybersecurity. It discusses information technology (IT) and operations technology (OT) dimensions during the phases of a project: engineering design, procurement, construction and assembly, commissioning, and operation. It also proposes a strategy for implementing such an approach in the oil and gas industry. _ With the aim of forming a holistic safety and security vision, the authors propose a unified analysis integrating cybersecurity, process safety, and human factors, focusing on their interfaces and opportunities presented by risk analysis and the convergence of business procedures. This is referred to in the proposed approach as a high-level integration layer, or the “strategic (outer) circle.” The combination of two concentric circles—strategic (outer) and operational (inner)—forms what the authors term a 360° approach. The Strategic (Outer) Circle The outer circle illustrates the strategic-level interfaces between key processes of cybersecurity, process safety, and human factors from a cybersecurity perspective. Cybersecurity/Process Safety Interface. Integration of Cybersecurity Into Process Safety Management Risk Analyses. One of the most practical examples of integration of cyber/physical attack scenarios into classical risk analyses is the use of layers-of-protection analysis and awareness of degradation of safety integrity level (SIL) barriers. An SIL is used to determine the required performance level of safety-instrumented functions (SIFs) to achieve the required risk reduction. The SIL of an SIF produces a risk-reduction factor that helps calculate the final total risk of a given scenario. Another opportunity to make this integration visible from the beginning of the engineering design is during the hazard and operability (HAZOP) study. The HAZOP study uses guidewords, standardized terms used to stimulate thinking about possible deviations in the established process. The idea is to create new words related to cybersecurity issues in the industrial-automation substrate, such as “data uncertain” (the data may have been corrupted) or “data unavailable” (the last available data is old). Special Cybersecurity Zone for Production-Critical Equipment. It is advisable that the zone and conduit analysis within the ISA/IEC 62443 framework consider segregating assets into distinct cybersecurity zones based on their operational continuity significance within the facility. For instance, a gas-export compressor, typically lacking redundancy, can halt a plant’s production, requiring secondary shutdowns of other systems. Therefore, by establishing a production-critical systems zone within the cybersecurity analysis, the availability of critical equipment and general operational availability can be ensured, and potential secondary effects of shutdowns and restarts can be mitigated. Cyber/Physical Integrated Incident-Response Program. Typically, incident-response programs are disjointed between cybersecurity and process safety, resulting in delays in digital responses to issues that have physical consequences. The formal inclusion of cybersecurity as a technical discipline in any process-safety incident-response program is essential and should be achieved even if it is discarded in the beginning of the analysis of a particular incident.
Security Perspective Analysis of Industrial Cyber Physical Systems (I-CPS): A Decade-wide Survey

Neha Agrawal,Rohit Kumar

DOI: https://doi.org/10.1016/j.isatra.2022.03.018

Abstract:Considering the exceptional growth of Cyber Physical Systems (CPSs), multiple and potentially grave security challenges have emerged in this field. Different vulnerabilities and attacks are present in front of new generation CPSs, such as Industrial CPS (I-CPS). The underlying non-uniform standards, device heterogeneity, network complexity, etc., make it difficult to offer a systematized coverage on CPS security in an industrial environment. This work considers the security perspective of I-CPSs, and offers a decade-wide survey including different vulnerabilities, attacks, CPS components, and various other aspects. The comparative year-wise analysis of the existing works w.r.t objective, approach referred, testbed used and derived inference, is also presented over a decade. Additionally, the work details different security issues and research challenges present in I-CPS. This work attempts to offer a concise and precise literature study focused on the state-of-the-art I-CPS security. This work also encourages the young researchers to explore the wide possibilities present in this emerging field.
Challenges and Opportunities in CPS Security: A Physics-based Perspective

Chuadhry Mujeeb Ahmed,Jianying Zhou

DOI: https://doi.org/10.48550/arXiv.2004.03178

2020-04-07

Abstract:The integration of cyber technologies (computing and communication) with the physical world gives rise to complex systems referred to as Cyber Physical Systems (CPS), for example, manufacturing, transportation, smart grid, and water treatment. Many of those systems are part of the critical infrastructure and need to perform safely, reliably, and securely in real-time. CPS security is challenging as compared to the conventional IT systems. An adversary can compromise the system in both the cyber and the physical domains. However, the unique set of technologies and processes being used in a CPS also bring up opportunities for defense. CPS security has been approached in several ways due to the complex interaction of physical and cyber components. In this work, a comprehensive study is taken to summarize the challenges and the proposed solutions for securing CPS from a Physics-based perspective.

Cryptography and Security,Systems and Control
Study on Drillship DP System Using American Petroleum Institute Security Risk Analysis and Bow-Tie Analysis

Iosif Progoulakis,Ioannis K. Dagkinis,Anastasia Dimakopoulou,Theodoros Lilas,Nikitas Nikitakos,Panagiotis M. Psomas

DOI: https://doi.org/10.3390/jmse12101757

IF: 2.744

2024-10-04

Journal of Marine Science and Engineering

Abstract:The maritime industry's increasing integration of IT/OT systems into vessel operations has significantly elevated its exposure to cyber–physical threats, making the development of effective cyber risk management strategies a necessity. This paper provides an outlook of the current landscape of cyber security threats and vulnerabilities for the maritime sector and vessels. An outline of the relevant governmental and industry directives, standards, and guidelines for cyber security in maritime vessels is given. Considering maritime vessels as critical elements of the maritime critical infrastructure sector, a number of relevant cyber–physical security assessment methods are presented. Bridging cyber–physical security, process safety, and security, API SRA (American Petroleum Institute Security Risk Analysis) and BTA (Bow-Tie Analysis) are presented as the most applicable cyber–physical security assessment methods for complex maritime vessels, such as an offshore oil and gas drillship. The scenario of a cyber-attack on the Dynamic Positioning (DP) system of a drillship is presented with the use of API SRA and BTA. The difficulties in the implementation of NIST CSF v2.0 and IACS UR E26 and UR E27 in the maritime sector are also discussed. The need for intensified research on and the formulation of bespoke cyber security measures to mitigate the evolving cyber threats within the maritime domain is highlighted. The need for the allocation of training and resources for the reinforcement of the capacity of a maritime vessel's crew in the mitigation of cyber threats and safe maritime operations is emphasized.

oceanography,engineering, marine, ocean
Cybersecurity in industrial control systems: Issues, technologies, and challenges

Muhammad Rizwan Asghar,Qinwen Hu,Sherali Zeadally

DOI: https://doi.org/10.1016/j.comnet.2019.106946

IF: 5.493

2019-12-01

Computer Networks

Abstract:Industrial Control Systems (ICSs) play an important role in today's industry by providing process automation, distributed control, and process monitoring. ICS was designed to be used in an isolated area or connected to other systems via specialised communication mechanisms or protocols. This setup allows manufacturers to manage their production processes with great flexibility and safety. However, this design does not meet today's business requirements to work with state-of-the-art technologies such as Internet-of-Things (IoT) and big data analytics. In order to fulfil industry requirements, many ICSs have been connected to enterprise networks that allow business users to access real-time data generated by power plants. At the same time, this new design opens up several cybersecurity challenges for ICSs.We review possible cyber attacks on ICSs, identify typical threats and vulnerabilities, and we discuss unresolved security issues with existing ICS cybersecurity solutions. Then, we discuss how to secure ICSs (e.g., using risk assessment methodologies) and other protection measures. We also identify open security research challenges for ICSs, and we present a classification of existing security solutions along with their strengths and weaknesses. Finally, we provide future research directions in ICS security.

computer science, information systems,telecommunications,engineering, electrical & electronic, hardware & architecture
Security Challenges in Cyber-Physical Production Systems

Peter Kieseberg,Edgar Weippl

DOI: https://doi.org/10.1007/978-3-319-71440-0_1

2017-11-19

Abstract:Within the last decade, Security became a major focus in the traditional IT-Industry, mainly through the interconnection of systems and especially through the connection to the Internet. This opened up a huge new attack surface, which resulted in major takedowns of legitimate services and new forms of crime and destruction. This led to the development of a multitude of new defense mechanisms and strategies, as well as the establishing of Security procedures on both, organizational and technical level. Production systems have mostly remained in isolation during these past years, with security typically focused on the perimeter. Now, with the introduction of new paradigms like Industry 4.0, this isolation is questioned heavily with Physical Production Systems (PPSs) now connected to an IT-world resulting in cyber-physical systems sharing the attack surface of traditional web based interfaces while featuring completely different goals, parameters like lifetime and safety, as well as construction. In this work, we present an outline on the major security challenges faced by cyber-physical production systems. While many of these challenges harken back to issues also present in traditional web based IT, we will thoroughly analyze the differences. Still, many new attack vectors appeared in the past, either in practical attacks like Stuxnet, or in theoretical work. These attack vectors use specific features or design elements of cyber-physical systems to their advantage and are unparalleled in traditional IT. Furthermore, many mitigation strategies prevalent in traditional IT systems are not applicable in the industrial world, e.g., patching, thus rendering traditional strategies in IT-Security unfeasible. A thorough discussion of the major challenges in CPPS-Security is thus required in order to focus research on the most important targets.
Cyber-Physical Systems Security -- A Survey

Abdulmalik Humayed,Jingqiang Lin,Fengjun Li,Bo Luo

DOI: https://doi.org/10.48550/arXiv.1701.04525

2017-01-17

Abstract:With the exponential growth of cyber-physical systems (CPS), new security challenges have emerged. Various vulnerabilities, threats, attacks, and controls have been introduced for the new generation of CPS. However, there lack a systematic study of CPS security issues. In particular, the heterogeneity of CPS components and the diversity of CPS systems have made it very difficult to study the problem with one generalized model. In this paper, we capture and systematize existing research on CPS security under a unified framework. The framework consists of three orthogonal coordinates: (1) from the \emph{security} perspective, we follow the well-known taxonomy of threats, vulnerabilities, attacks and controls; (2)from the \emph{CPS components} perspective, we focus on cyber, physical, and cyber-physical components; and (3) from the \emph{CPS systems} perspective, we explore general CPS features as well as representative systems (e.g., smart grids, medical CPS and smart cars). The model can be both abstract to show general interactions of a CPS application and specific to capture any details when needed. By doing so, we aim to build a model that is abstract enough to be applicable to various heterogeneous CPS applications; and to gain a modular view of the tightly coupled CPS components. Such abstract decoupling makes it possible to gain a systematic understanding of CPS security, and to highlight the potential sources of attacks and ways of protection.

Cryptography and Security
Cybersecurity for Industrial Control Systems: A Survey

Deval Bhamare,Maede Zolanvari,Aiman Erbad,Raj Jain,Khaled Khan,Nader Meskin

DOI: https://doi.org/10.48550/arXiv.2002.04124

2020-02-10

Cryptography and Security

Abstract:Industrial Control System (ICS) is a general term that includes supervisory control & data acquisition (SCADA) systems, distributed control systems (DCS), and other control system configurations such as programmable logic controllers (PLC). ICSs are often found in the industrial sectors and critical infrastructures, such as nuclear and thermal plants, water treatment facilities, power generation, heavy industries, and distribution systems. Though ICSs were kept isolated from the Internet for so long, significant achievable business benefits are driving a convergence between ICSs and the Internet as well as information technology (IT) environments, such as cloud computing. As a result, ICSs have been exposed to the attack vectors used in the majority of cyber-attacks. However, ICS devices are inherently much less secure against such advanced attack scenarios. A compromise to ICS can lead to enormous physical damage and danger to human lives. In this work, we have a close look at the shift of the ICS from stand-alone systems to cloud-based environments. Then we discuss the major works, from industry and academia towards the development of the secure ICSs, especially applicability of the machine learning techniques for the ICS cyber-security. The work may help to address the challenges of securing industrial processes, particularly while migrating them to the cloud environments.
Understanding Indicators of Compromise against Cyber-Attacks in Industrial Control Systems: A Security Perspective

Mohammed Asiri,Neetesh Saxena,Rigel Gjomemo,Pete Burnap

DOI: https://doi.org/10.1145/3587255

2023-03-15

ACM Transactions on Cyber-Physical Systems

Abstract:Numerous sophisticated and nation-state attacks on Industrial Control Systems (ICSs) have increased in recent years, exemplified by Stuxnet and Ukrainian Power Grid. Measures to be taken post-incident are crucial to reduce damage, restore control, and identify attack actors involved. By monitoring Indicators of Compromise (IOCs), the incident responder can detect malicious activity triggers and respond quickly to a similar intrusion at an earlier stage. However, in order to implement IOCs in critical infrastructures, we need to understand their contexts and requirements. Unfortunately, there is no survey paper in the literature on IOC in the ICS environment and only limited information is provided in research articles. In this paper, we describe different standards for IOC representation and discuss the associated challenges that restrict security investigators from developing IOCs in the industrial sectors. We also discuss the potential IOCs against cyber-attacks in ICS systems. Furthermore, we conduct a critical analysis of existing works and available tools in this space. We evaluate the effectiveness of identified IOCs' by mapping these indicators to the most frequently targeted attacks in the ICS environment. Finally we highlight the lessons to be learnt from the literature and the future problems in the domain along with the approaches that might be taken.
Cyber Security in the Maritime Industry: A Systematic Survey of Recent Advances and Future Trends

Mohamed Amine Ben Farah,Elochukwu Ukwandu,Hanan Hindy,David Brosset,Miroslav Bures,Ivan Andonovic,Xavier Bellekens

DOI: https://doi.org/10.3390/info13010022

2022-01-06

Information

Abstract:The paper presents a classification of cyber attacks within the context of the state of the art in the maritime industry. A systematic categorization of vessel components has been conducted, complemented by an analysis of key services delivered within ports. The vulnerabilities of the Global Navigation Satellite System (GNSS) have been given particular consideration since it is a critical subcategory of many maritime infrastructures and, consequently, a target for cyber attacks. Recent research confirms that the dramatic proliferation of cyber crimes is fueled by increased levels of integration of new enabling technologies, such as IoT and Big Data. The trend to greater systems integration is, however, compelling, yielding significant business value by facilitating the operation of autonomous vessels, greater exploitation of smart ports, a reduction in the level of manpower and a marked improvement in fuel consumption and efficiency of services. Finally, practical challenges and future research trends have been highlighted.
Detection and analysis of cybersecurity challenges for processing systems

Luyang Liu,Zaman Sajid,Costas Kravaris,Faisal Khan

DOI: https://doi.org/10.1016/j.psep.2024.03.088

IF: 7.8

2024-05-01

Process Safety and Environmental Protection

Abstract:Due to cyber threats, Process Control Systems (PCS) are increasingly at risk in the interconnected world. This review elucidates PCS's mounting cybersecurity challenges, underscored by past incidents. Utilizing the National Institute of Standards and Technology (NIST) framework, we emphasize the importance of a comprehensive approach to cybersecurity, spanning risk identification to its mitigation. This systematic framework comprises five pillars: risk identification, protective measures, active threat detection, timely incident response, and post-attack recovery. This study then delves into the range of cyber-attack detection algorithms, from traditional fault detection and isolation techniques to advanced machine learning-based methods, qualitative models, hybrid approaches, and signature-based methods. Notwithstanding the progress, research gaps, challenges, and a demand for a proactive path forward remain. This study proposes a path forward that integrates the digital system with a resilient control system to ensure the security of the process control systems and a harmonious blend of domain expertise and evolving technological innovations.

engineering, environmental, chemical
Security issues and challenges for cyber physical system

Wang Eric Ke,Ye, Yunming,Xu Xiaofei,S. M. Yiu,L. C. K. Hui,K. P. Chow

DOI: https://doi.org/10.1109/GreenCom-CPSCom.2010.36

2018-01-01

Abstract:In this paper, we investigate the security challenges and issues of cyber-physical systems. (1)We abstract the general workflow of cyber physical systems, (2)identify the possible vulnerabilities, attack issues, adversaries characteristics and a set of challenges that need to be addressed; (3)then we also propose a context-aware security framework for general cyber-physical systems and suggest some potential research areas and problems. © 2010 IEEE.
Cyber security threats in industrial control systems and protection

Mounesh Marali,Sithu D Sudarsan,Ashok Gogioneni

DOI: https://doi.org/10.1109/icacce46606.2019.9079981

2019-04-01

Abstract:Industrial automation and control systems are increasingly based on open communication protocols and platforms that are also commonly used in corporate IT environments and interconnected to enable integration with business applications, they become increasingly exposed to the internet. As seen in the past with WannaCry and NotPetya, it's more likely common malware will cause the most damage in the long run. These threats are expected to increase simply since the fundamental gaps in protecting the operational technology (OT) over information technology (IT) widening. As OT becomes increasingly exposed to internet, it tends to become weak spot to cyber threats as any other connected systems. This is basically because of OT components aligned on the same hardware, software, communication protocols including operating systems that run IT components, such as networks, client, server machines & other connected devices. At the same time, reusable development and deployment of interconnected systems and their communication networks become vulnerable to cyber-attacks. This paper explores cyber security issues in industrial control systems that are built on open communication platforms and networks. Specially emphasized on attacker's objectives, electronics methods and possible countermeasures for IT systems. The paper also describes various OT security-relevant characteristics distinct from the office IT systems and relevant implementation approaches at multiple system layers to protect from cyber-attacks. Finally, paper illustrates few application level security concepts with case studies focusing configuration and operation of industrial process control system.
Cybersecurity in the Transportation of Energy Resources

DOI: https://doi.org/10.37075/yb.2021.2.10

2021-12-28

Yearbook of UNWE

Abstract:Technical constraints in the field of transport of energy resources following the digitization are particularly relevant in the case of critical infrastructure and Industry 4.0. Since all industrial facilities, of the sector like petrochemical pipelines, expensive to build and designed without any particular form of protection against cyber-attacks, followed a plug-in approach: new technologies have been added on top of existing layers to ensure compatibility and as such became exposed to cyber-attacks. Cyberattacks on energy plants and transportation means could become the most serious threat to any country’s national security, to the impact on the population and the physical destruction of structures, usually in an extremely wide area. The paper justifies and sums up some steps that both governments and industry should follow and plan for: a) creating instruments and structures in place for conducting strategic intelligence prior to attacks on the network b) invest in designing programs that will raise the awareness of the potential threats and will map out the weak points c) boost collaboration and industry partnerships to address the increasing convergence of physical and virtual threats.
Vulnerabilities and Attacks Against Industrial Control Systems and Critical Infrastructures

Georgios Michail Makrakis,Constantinos Kolias,Georgios Kambourakis,Craig Rieger,Jacob Benjamin

DOI: https://doi.org/10.48550/arXiv.2109.03945

2021-09-08

Cryptography and Security

Abstract:Critical infrastructures (CI) and industrial organizations aggressively move towards integrating elements of modern Information Technology (IT) into their monolithic Operational Technology (OT) architectures. Yet, as OT systems progressively become more and more interconnected, they silently have turned into alluring targets for diverse groups of adversaries. Meanwhile, the inherent complexity of these systems, along with their advanced-in-age nature, prevents defenders from fully applying contemporary security controls in a timely manner. Forsooth, the combination of these hindering factors has led to some of the most severe cybersecurity incidents of the past years. This work contributes a full-fledged and up-to-date survey of the most prominent threats against Industrial Control Systems (ICS) along with the communication protocols and devices adopted in these environments. Our study highlights that threats against CI follow an upward spiral due to the mushrooming of commodity tools and techniques that can facilitate either the early or late stages of attacks. Furthermore, our survey exposes that existing vulnerabilities in the design and implementation of several of the OT-specific network protocols may easily grant adversaries the ability to decisively impact physical processes. We provide a categorization of such threats and the corresponding vulnerabilities based on various criteria. As far as we are aware, this is the first time an exhaustive and detailed survey of this kind is attempted.

Cybersecurity Challenges in the Offshore Oil and Gas Industry: An Industrial Cyber-Physical Systems (ICPS) Perspective

Cybersecurity of Industrial Cyber-Physical Systems: A Review

Cyber Physical Systems Security for Maritime Assets

Privacy and Security of Cyberphysical Systems

Cyber Attacks on Maritime Assets and their Impacts on Health and Safety Aboard: A Holistic View

Industrial Cybersecurity, Process Safety, and Human Factors: A 360° Approach

Security Perspective Analysis of Industrial Cyber Physical Systems (I-CPS): A Decade-wide Survey

Challenges and Opportunities in CPS Security: A Physics-based Perspective

Study on Drillship DP System Using American Petroleum Institute Security Risk Analysis and Bow-Tie Analysis

Cybersecurity in industrial control systems: Issues, technologies, and challenges

Security Challenges in Cyber-Physical Production Systems

Cyber-Physical Systems Security -- A Survey

Cybersecurity for Industrial Control Systems: A Survey

Understanding Indicators of Compromise against Cyber-Attacks in Industrial Control Systems: A Security Perspective

Cyber Security in the Maritime Industry: A Systematic Survey of Recent Advances and Future Trends

Detection and analysis of cybersecurity challenges for processing systems

Security issues and challenges for cyber physical system

Cyber security threats in industrial control systems and protection

Cybersecurity in the Transportation of Energy Resources

Vulnerabilities and Attacks Against Industrial Control Systems and Critical Infrastructures