CYBERSECURITY OF INDUSTRIAL CYBER-PHYSICAL SYSTEMS: AREVIEW Hakan Kayan Matthew Nunes School of Computer Science and Informatics School of Computer Science and Informatics Cardiff University, UK Cardiff University, UK
[email protected] [email protected] Omer Rana Pete Burnap School of Computer Science and Informatics School of Computer Science and Informatics Cardiff University, UK Cardiff University, UK
[email protected] [email protected] Charith Perera School of Computer Science and Informatics Cardiff University, UK
[email protected] January 12, 2021 ABSTRACT Industrial cyber-physical systems (ICPSs) manage critical infrastructures by controlling the processes based on the “physics” data gathered by edge sensor networks. Recent innovations in ubiquitous computing and communication technologies have prompted the rapid integration of highly intercon- nected systems to ICPSs. Hence, the “security by obscurity” principle provided by air-gapping is no longer followed. As the interconnectivity in ICPSs increases, so does the attack surface. Industrial vulnerability assessment reports have shown that a variety of new vulnerabilities have occurred due to this transition while the most common ones are related to weak boundary protection. Although there are existing surveys in this context, very little is mentioned regarding these reports. This paper bridges this gap by defining and reviewing ICPSs from a cybersecurity perspective. In particular, multi-dimensional adaptive attack taxonomy is presented and utilized for evaluating