Decomposition and sequential-AND analysis of known cyber-attacks on critical infrastructure control systems

Maynard, Peter, McLaughlin, Kieran and Sezer, Sakir 2020. Decomposition and sequential-AND analysis of known cyber-attacks on critical infrastructure control systems. Journal of Cybersecurity 6 (1) 10.1093/cybsec/tyaa020

Full text not available from this repository.

Abstract

We perform a detailed survey and analysis of the most significant attacks, which have targeted industrial control systems over the past decade, based on detailed incident reports from scientific and non-traditional resources. This work is the first that considers together a comprehensive set of real-world cyber-attacks with the purpose of deriving a set of common features focusing particularly on the process control network. Each attack is decomposed to provide a comprehensive overview followed by a discussion of the commonalities identified across attacks. To achieve this, each attack is modelled using Attack Trees with Sequential AND, and mapped to the industrial control system Cyber Kill Chain. We focus on the methods of intrusion rather than the identification of actors. This article can be read in two parts: first, an analysis of each attack, and secondly a discussion of the derived commonalities. The resulting commonalities can be used to develop improved detection strategies to detect modern adversarial techniques and tactics.

Item Type:	Article
Date Type:	Publication
Status:	Published
Schools:	Computer Science & Informatics
Publisher:	Oxford University Press
ISSN:	2057-2085
Date of Acceptance:	14 October 2020
Last Modified:	25 Aug 2023 13:45
URI:	https://orca.cardiff.ac.uk/id/eprint/161744

Actions (repository staff only)

Edit Item