White Papers

Security incidents and trends in the SCADA and process industries

Print page

Email page

This report presents evidence in support of a business case for improving security of Supervisory Control and Data Acquisition (SCADA), process control networks (PCN), and manufacturing and industrial automation systems based on an analysis of statistical trends in security incidents.

By Eric Byres, David Leversage & Nate Kube

This report is based on an analysis of statistical trends in security incidents as recorded in the Industrial Security Incident Database (ISID), a collection of known cybersecurity events that have occurred against control systems in the manufacturing and critical infrastructure industries. It describes a number of events that directly impacted process control systems and shows that the number of cyber incidents against SCADA and control systems worldwide has increased significantly since 2001.

The analysis indicates that many SCADA/process control networks (PCN) have poorly documented points of entry that provide secondary pathways into the system. The analysis highlights several key areas where the average SCADA/PCN system could be better secured, and provides guidance on how to create such a security program system by following a simple and holistic five-stage strategy that avoids the common piecemeal approach to security.

File Size: 397 KB
File Type: PDF

This content is for members only. Please use the login or register link below to access this white paper.

Login or Register Now