Home > Resources > Whitepapers > Cyber security risk assessment for SCADA and DCS networks

Cyber security risk assessment for SCADA and DCS networks

The growing dependence of critical infrastructures and industrial automation on interconnected physical and cyber-based control systems has resulted in a growing and previously unforeseen cyber security threat to supervisory control and data acquisition (SCADA) and distributed control systems (DCSs). It is critical that engineers and managers understand these issues and know how to locate the information they need. This paper provides a broad overview of cyber security and risk assessment for SCADA and DCS, introduces the main industry organizations and government groups working in this area, and gives a comprehensive review of the literature to date. Major concepts related to the risk assessment methods are introduced with references cited for more detail. Included are risk assessment methods such as HHM, IIM, and RFRM which have been applied successfully to SCADA systems with many interdependencies and have highlighted the need for quantifiable metrics. Presented in broad terms is probability risk analysis (PRA) which includes methods such as FTA, ETA, and FEMA. The paper concludes with a general discussion of two recent methods (one based on compromise graphs and one on augmented vulnerability trees) that quantitatively determine the probability of an attack, the impact of the attack, and the reduction in risk associated with a particular countermeasure.

Spotlight

Bivio Networks, Inc.

Founded in 2000, Bivio Networks is dedicated to providing leading deep packet inspection products that enable government agencies, service providers and enterprise customers to monitor, control, and secure critical network infrastructure.

OTHER WHITEPAPERS

Setting Security Baselines in Microsoft 365

whitePaper | December 28, 2022

One of the greatest risks you will face in your Microsoft environment is Business Email Compromise. This attack costs organizations around the world millions in losses each year, with no signs of slowing down.

Cisco Spaces – Privacy and Data Protection

whitePaper | December 2, 2022

Cisco Spaces is an indoor location services cloud platform that provides wireless customers with rich locationbased services, including location analytics, business insight, customer experience management, asset tracking, Bluetooth Low Energy (BLE) management, and API.

CISA Stakeholder-Specific Vulnerability Categorization Guide

whitePaper | November 9, 2022

The CISA Stakeholder-Specific Vulnerability Categorization (SSVC) is a customized decision tree model that assists in prioritizing vulnerability response for the United States government (USG), state, local, tribal, and territorial (SLTT) governments; and critical infrastructure (CI) entities. This document serves as a guide for evaluating vulnerabilities using the CISA SSVC decision tree. The goal of SSVC is to assist in prioritizing the remediation of a vulnerability basedon the impact exploitation would have to the particular organization(s).

Is Cyber Security Meeting Today’s Intensifying Challenges?

whitePaper | September 22, 2022

Cybersecurity has always been critical, but it’s taken on new urgency today. Cyberattacks have escalated in intensity and volume. At the same time, IT is experiencing the pressing challenges of a technology modernization revolution. Driving this tech revolution are remote work environments, a skills shortage and unprecedented growth in cloud deployments. These developments bring increasing requirements to proactively secure environments, deflect risks and rapidly respond to cyberattacks.

Revolutionizing cybersecurity

whitePaper | October 31, 2021

FINX, a platform established since 2018 that is enabled by blockchain technology to create the world’s 1st comprehensive decentralized banking platform. FINX aspires to resolve the problem of high banking costs imposed by conventional banks and serve the unbanked market in Southeast Asia.

Cyber security risk assessment for SCADA and DCS networks

Spotlight

Bivio Networks, Inc.

OTHER WHITEPAPERS

Setting Security Baselines in Microsoft 365

Cisco Spaces – Privacy and Data Protection

CISA Stakeholder-Specific Vulnerability Categorization Guide

Is Cyber Security Meeting Today’s Intensifying Challenges?

Revolutionizing cybersecurity

Cybersecurity - for safe and secure mobility

Setting Security Baselines in Microsoft 365

Cisco Spaces – Privacy and Data Protection

CISA Stakeholder-Specific Vulnerability Categorization Guide

Is Cyber Security Meeting Today’s Intensifying Challenges?

Revolutionizing cybersecurity

Cybersecurity - for safe and secure mobility

Spotlight

Bivio Networks, Inc.

Events

Cyber Security World Asia

Nordic IT Security Event

Cyber Security World Asia

Nordic IT Security Event