Key Vulnerabilities of Industrial Automation and Control Systems and Actions to Prevent Cyber-Attacks

Authors

DOI:

https://doi.org/10.3991/ijoe.v12i1.4888

Keywords:

Cyber-security, Cyber-attacks, Vulnerabilities, Industrial Automation, Industrial Communications

Abstract


Until recently, Industrial Automation and Control Systems (IACS) were largely isolated from corporate systems by means of proprietary protocols, which facilitated their protection against cyber-attacks under the principle of security through obscurity. However, the widespread adoption of the new communication technologies, such as the Internet protocols and wireless communications has changed this scenario. During recent years there have been many evidences of cyber-attacks to IACS that exploit their vulnerabilities. Unfortunately, these attacks have increased significantly during the last five years, and we should be aware that only the tip of the iceberg comes to the public knowledge. The purpose of this article is twofold: (1) to raise awareness about the security vulnerabilities that most companies are facing at their IACS and (2) to set a starting point by proposing a roadmap that seeks to guide designers and programmers in the new and complex world of industrial cyber-security.

Author Biographies

Isidro Calvo, UPV/EHU

Dept. Systems Engineering and Automatic Control Senior Lecturer

Ismael Etxeberria-Agiriano, UPV/EHU

Dept. Computer Languages and Systems Senior Lecturer

Pablo González-Nalda, UPV/EHU

Dept. Computer Languages and Systems Senior Lecturer

Downloads

Published

2016-01-18

How to Cite

Calvo, I., Etxeberria-Agiriano, I., Iñigo, M. A., & González-Nalda, P. (2016). Key Vulnerabilities of Industrial Automation and Control Systems and Actions to Prevent Cyber-Attacks. International Journal of Online and Biomedical Engineering (iJOE), 12(01), pp. 9–16. https://doi.org/10.3991/ijoe.v12i1.4888

Issue

Section

Papers