Options
Securing industrial control systems
Publikationstyp
Book Part
Date Issued
2019
Sprache
English
Author(s)
TORE-URI
Start Page
3
End Page
27
Citation
Security and Privacy Trends in the Industrial Internet of Things: 3-27 (2019)
Publisher DOI
Scopus ID
Publisher
Springer
We propose controllability, observability, and operability as the core security objectives of a control system, whilst the much-used triad of confidentiality, integrity, and availability captures the security requirements on IT infrastructures. We discuss how the deployment of IT in industrial control systems has changed the attack surface, how this invalidates assumptions about independent failure modes crucial in safety design, and explain why stronger IT infrastructure security does not necessarily imply better ICS security. We show how process physics can be used to carry attack payloads and thus become an instrument for the attacker, and argue that ICS security standards should expand their scope to the physical processes layer.
Subjects
Controllability
ICS security
IIoT
Integrity
Observability
Operability
Safety
Veracity