Improving Security for SCADA Control Systems

Abstract

Executive SummaryThe continuous growth of cyber security threats and attacks including the increasing sophistication of malware is impacting the security of critical infrastructure, industrial control systems, and Supervisory Control and Data Acquisition (SCADA) control systems. The reliable operation of modern infrastructures depends on computerized systems and SCADA systems. Since the emergence of Internet and World Wide Web technologies, these systems were integrated with business systems and became more exposed to cyber threats. There is a growing concern about the security and safety of the SCADA control systems. The Presidential Decision Directive 63 document established the framework to protect the critical infrastructure and the Presidential document of 2003, the National Strategy to Secure Cyberspace stated that securing SCADA systems is a national priority. T he critical infrastructure includes telecommunication, transportation, energy, banking, finance, water supply, emergency services, government services, agriculture, and other fundamental systems and services that are critical to the security, economic prosperity, and social well-being of the public. The critical infrastructure is characterized by interdependencies (physical, cyber, geographic, and logical) and complexity (collections of interacting components). Therefore, information security management principles and processes need to be applied to SCADA systems without exception. Critical infrastructure disruptions can directly and indirectly affect other infrastructures, impact large geographic regions, and send ripples throughout the national and global economy. For example, under normal operating conditions, the electric power infrastructure requires fuels (natural gas and petroleum), transportation, water, banking and finance, telecommunication, and SCADA systems for monitoring and control.In this paper, we provide an analysis of key developments, architecture, potential vulnerabilities, and security concerns including recommendations toward improving security for SCADA control systems. We discuss the most important issues concerning the security of SCADA systems including a perspective on enhancing security of these systems. We briefly describe the SCADA architecture, and identify the attributes that increase the complexity of these systems including the key developments that mark the evolution of the SCADA control systems along with the growth of potential vulnerabilities and security concerns. Then, we provide recommendations toward an enhanced security for SCADA control systems. More efforts should be planned on reducing the vulnerabilities and improving the security operations of these systems. It is necessary to address not only the individual vulnerabilities, but the breadth of risks that can interfere with critical operations.We describe key requirements and features needed to improve the security of the current SCADA control systems. For example, in assessing the risk for SCADA systems, use of general methods for risk analysis inclu...

Development of SCADA automated 33kV substation model as testing platform

“…Thus during the design phase this threat should be taken into consideration. The Common Vulnerability Scoring System (CVSS), provides scores for the commonly reported vulnerabilities, could be used to assess the software used [12].…”

Intelligent gateway for SCADA system security: A multi-layer attack prevention approach

“…M.Hentea [7] observed the similarity of threats which occur in information technology and SCADA system. SCADA systems are subject to the same threats as the conventional I.T.…”

Towards a novel quantification approach based on smart grid network vulnerability score

“…Although several studies [5][6][7][8][9][10][11][12][13][14] have been conducted from various standpoints to solve such problems, they do not present a fundamental solution. Also, there are some researches for SCADA or cyber infrastructure's security assessment, but these results cannot apply to smart grid network directly [15][16][17][18][19][20]. Specifically, some studies [21,22] report difficulties in applying a Common Vulnerability Scoring System (CVSS) as an industrial standard (i.e., a de facto standard) for quantifying security vulnerabilities in smart grid environment.…”