Lessons Learned From Cyber Security Assessments of SCADA And Energy Management Systems.

Fink, R. K. ; Spencer, D. F. ; Wells, R. A.

Technical Information Center Oak Ridge Tennessee

关键词: Assessments;    Vulnerability;    Energy management systems;    Control systems;    Information security;   

RP-ID  :  DE2007911724

学科分类：工程和技术（综合）

美国|英语

来源: National Technical Reports Library

【 摘 要 】

The results from ten cyber security vulnerability assessments of process control, SCADA and energy management systems, or components of those systems were reviewed to identify common problem areas. The common vulnerabilities ranged from conventional IT security issues to specific weaknesses in control system protocols. In each vulnerability category, relative measures were assigned to the severity of the vulnerability and ease with which an attacker could exploit the vulnerability. Suggested mitigations are identified in each category. Recommended mitigations having the highest impact on reducing vulnerability are listed for asset owners and system vendors.