Denial-of-service attack

Context (archaeology)

World Wide Web

Cyber-physical system

Interconnectivity

Biology

Vulnerability management

Variety (cybernetics)

Psychological resilience

Computer security

Operating system

The Internet

Anomaly detection

Data mining

Computer science

Risk analysis (engineering)

Paleontology

Vulnerability (computing)

Vulnerability assessment

Psychology

Psychotherapist

Data science

Artificial intelligence

Intrusion detection system

Medicine

ACM Computing Surveys

Industrial cyber-physical systems ( ICPSs ) manage critical infrastructures by controlling the processes based on the “physics” data gathered by edge sensor networks. Recent innovations in ubiquitous computing and communication technologies have prompted the rapid integration of highly interconnected systems to ICPSs. Hence, the “security by obscurity” principle provided by air-gapping is no longer followed. As the interconnectivity in ICPSs increases, so does the attack surface. Industrial vulnerability assessment reports have shown that a variety of new vulnerabilities have occurred due to this transition. Although there are existing surveys in this context, very little is mentioned regarding the outputs of these reports. While these reports show that the most exploited vulnerabilities occur due to weak boundary protection, these vulnerabilities also occur due to limited or ill-defined security policies. However, current literature focuses on intrusion detection systems ( IDSs ), network traffic analysis ( NTA ) methods, or anomaly detection techniques. Hence, finding a solution for the problems mentioned in these reports is relatively hard. We bridge this gap by defining and reviewing ICPSs from a cybersecurity perspective. In particular, multi-dimensional adaptive attack taxonomy is presented and utilized for evaluating real-life ICPS cyber incidents. Finally, we identify the general shortcomings and highlight the points that cause a gap in existing literature while defining future research directions.

Cybersecurity of Industrial Cyber-Physical Systems: A Review