LESSONS LEARNED FROM CYBER SECURITY ASSESSMENTS OF SCADA AND ENERGY MANAGEMENT SYSTEMS

Conference · Sun Oct 01 00:00:00 EDT 2006

OSTI ID:911724

Fink, Ray

The results from ten cyber security vulnerability assessments of process control, SCADA and energy management systems, or components of those systems were reviewed to identify common problem areas. The common vulnerabilities ranged from conventional IT security issues to specific weaknesses in control system protocols. In each vulnerability category, relative measures were assigned to the severity of the vulnerability and ease with which an attacker could exploit the vulnerability. Suggested mitigations are identified in each category. Recommended mitigations having the highest impact on reducing vulnerability are listed for asset owners and system vendors.

• Research Organization: Idaho National Lab. (INL), Idaho Falls, ID (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: DE-AC07-99ID-13727
• OSTI ID: 911724
• Report Number(s): INL/CON-06-11665; TRN: US200801%%174
• Resource Relation: Conference: ISA Expo 2006,Houston TX,10/16/2006,10/19/2006
• Country of Publication: United States
• Language: English

Related Subjects

99 - GENERAL AND MISCELLANEOUS//MATHEMATICS, COMPUTING, AND INFORMATION SCIENCE
CONTROL SYSTEMS
ENERGY MANAGEMENT SYSTEMS
PROCESS CONTROL
SECURITY
VULNERABILITY
Control Systems
Cyber Security
SCADA