Cybersecurity through Real-Time Distributed Control Systems

Kisner, Roger A¹  Manges, Wayne W¹  MacIntyre, Lawrence Paul¹  Nutaro, James J¹  Munro Jr, John K¹  Ewing, Paul D¹  Howlader, Mostofa¹  Kuruganti, Phani Teja¹  Wallace, Richard M¹  Olama, Mohammed M² 

[1] ORNL;O

关键词: COMPUTERIZED CONTROL SYSTEMS;    SECURITY;    REAL TIME SYSTEMS;    VULNERABILITY;    SABOTAGE cybersecurity;    distributed control;    real-time control;   

DOI  :  10.2172/978289
RP-ID  :  ORNL/TM-2010/30
PID  :  OSTI ID: 978289
Others  :  Other: TD5008010
Others  :  CETD004
Others  :  TRN: US201010%%386

美国|英语

来源: SciTech Connect

【 摘 要 】

Critical infrastructure sites and facilities are becoming increasingly dependent on interconnected physical and cyber-based real-time distributed control systems (RTDCSs). A mounting cybersecurity threat results from the nature of these ubiquitous and sometimes unrestrained communications interconnections. Much work is under way in numerous organizations to characterize the cyber threat, determine means to minimize risk, and develop mitigation strategies to address potential consequences. While it seems natural that a simple application of cyber-protection methods derived from corporate business information technology (IT) domain would lead to an acceptable solution, the reality is that the characteristics of RTDCSs make many of those methods inadequate and unsatisfactory or even harmful. A solution lies in developing a defense-in-depth approach that ranges from protection at communications interconnect levels ultimately to the control system s functional characteristics that are designed to maintain control in the face of malicious intrusion. This paper summarizes the nature of RTDCSs from a cybersecurity perspec tive and discusses issues, vulnerabilities, candidate mitigation approaches, and metrics.