A forensic taxonomy of SCADA systems and approach to incident response

Eden, Peter, Blyth, Andrew, Burnap, Peter ORCID: https://orcid.org/0000-0003-0396-633X, Jones, Kevin and Stoddart, Kristen 2015. A forensic taxonomy of SCADA systems and approach to incident response. Presented at: The 3rd International Symposium for ICS and SCADA Cyber Security Research 2015 (ICS-CSR 2015), Ingolstadt, Germany, 17 - 18 September 2015. 10.14236/ewic/ICS2015.5

Full text not available from this repository.

Abstract

SCADA systems that monitor and control Critical National Infrastructure (CNI) are increasingly becoming the target of advanced cyber-attacks since their convergence with TCP/IP and other networks for efficient controlling. When a SCADA incident occurs the consequences can be catastrophic having an impact on the environment, economy and human life and therefore it is essential for a forensic investigation to take place. SCADA system forensics is an essential process within the cyber-security lifecycle that not only helps to identify the cause of an incident and those responsible but to help develop and design more secure systems of the future. This paper provides an overall forensic taxonomy of the SCADA system incident response model. It discusses the development of forensic readiness within SCADA system investigations, including the challenges faced by the SCADA forensic investigator and suggests ways in which the process may be improved.

Item Type:	Conference or Workshop Item (Paper)
Date Type:	Completion
Status:	Unpublished
Schools:	Computer Science & Informatics
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science Q Science > QA Mathematics > QA76 Computer software
Funders:	the Airbus Group Endeavr Wales (AG-EW-14:700033)
Last Modified:	31 Oct 2022 09:46
URI:	https://orca.cardiff.ac.uk/id/eprint/82419

Citation Data

Actions (repository staff only)

Edit Item