Cybersecurity through Real-Time Distributed Control Systems

Kisner, Roger A ; Manges, Wayne W ; MacIntyre, Lawrence Paul ; Nutaro, James J ; Munro Jr, John K ; Ewing, Paul D ; Howlader, Mostofa ; Kuruganti, Phani Teja ; Wallace, Richard M ; Olama, Mohammed M

Oak Ridge National Laboratory

关键词: Real-Time Control;    99 General And Miscellaneous//Mathematics, Computing, And Information Science;    Vulnerability;    Computerized Control Systems;    Sabotage Cybersecurity;   

DOI  :  10.2172/978289
RP-ID  :  ORNL/TM-2010/30
RP-ID  :  DE-AC05-00OR22725
RP-ID  :  978289

美国|英语

来源: UNT Digital Library

【 摘 要 】

Critical infrastructure sites and facilities are becoming increasingly dependent on interconnected physical and cyber-based real-time distributed control systems (RTDCSs). A mounting cybersecurity threat results from the nature of these ubiquitous and sometimes unrestrained communications interconnections. Much work is under way in numerous organizations to characterize the cyber threat, determine means to minimize risk, and develop mitigation strategies to address potential consequences. While it seems natural that a simple application of cyber-protection methods derived from corporate business information technology (IT) domain would lead to an acceptable solution, the reality is that the characteristics of RTDCSs make many of those methods inadequate and unsatisfactory or even harmful. A solution lies in developing a defense-in-depth approach that ranges from protection at communications interconnect levels ultimately to the control system s functional characteristics that are designed to maintain control in the face of malicious intrusion. This paper summarizes the nature of RTDCSs from a cybersecurity perspec tive and discusses issues, vulnerabilities, candidate mitigation approaches, and metrics.