SCADA (supervisory control and data acquisition) systems: Vulnerability assessment and security recommendations
Abstract
Abstract Growing dependency and remote accessibility of automated industrial automation systems have transformed SCADA (Supervisory Control and Data Acquisition) networks from strictly isolated to highly interconnected networks. This increase in interconnectivity between systems raises operational efficiency due to the ease of controlling and monitoring of processes, however, this inevitable transformation also exposes the control system to the outside world. As a result, effective security strategies are required as any vulnerability of the SCADA system could generate severe financial and/or safety implications. The primary task when identifying holes in the system is to have proper awareness of the SCADA vulnerabilities and threats. This approach will help to identify potential breaches or aspects in the system where a breach may occur. This paper describes various types of potential SCADA vulnerabilities by taking real incidents reported in standard vulnerability databases. A comprehensive review of each type of vulnerability has been discussed along with recommendations for the improvement of SCADA security systems.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The exploitation of field device firmware is a least focused research area.
“Surprisingly, the exploitation of field device firmware is a least focused research area [59,60,61].”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [59]
Cites
1 retracted
National checklist program for IT products - guidelines for checklist users and developers
Quinn, S. D., Souppaya, M., Cook, M., et al. (2018) · doi:10.6028/nist.sp.800-70r4 · Cited by 20 · see citing works
RetractedLin, J., Yu, W., Zhang, N., Yang, X., Zhang, H., & Zhao, W. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2683200 · Cited by 2,793 · see citing works
DDoS in the IoT: Mirai and Other Botnets
Kolias, C., Kambourakis, G., Stavrou, A., & Voas, J. (2017) · Computer · doi:10.1109/mc.2017.201 · Cited by 1,892 · see citing works
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377 · see citing works
A review of cyber security risk assessment methods for SCADA systems
Cherdantseva, Y., Burnap, P., Blyth, A., Eden, P., Jones, K., Soulsby, H., & Stoddart, K. (2016) · Computers & Security · doi:10.1016/j.cose.2015.09.009 · Cited by 606 · see citing works
Security issues in SCADA networks
Igure, V. M., Laughter, S. A., & Williams, R. D. (2006) · Computers & Security · doi:10.1016/j.cose.2006.03.001 · Cited by 566 · see citing works
How Can Heterogeneous Internet of Things Build Our Future: A Survey
Qiu, T., Chen, N., Li, K., Atiquzzaman, M., & Zhao, W. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2803740 · Cited by 445 · see citing works
Sajid, A., Abbas, H., & Saleem, K. (2016) · IEEE Access · doi:10.1109/access.2016.2549047 · Cited by 401 · see citing works
SCADA security in the light of cyber-warfare
Nicholson, A., Webber, S., Dyer, S., Patel, T., & Janicke, H. (2012) · Computers & Security · doi:10.1016/j.cose.2012.02.009 · Cited by 334 · see citing works
Guide to computer security log management
Kent, K., & Souppaya, M. P. (2006) · doi:10.6028/nist.sp.800-92 · Cited by 275 · see citing works
Cryptographic Solutions for Industrial Internet-of-Things: Research Challenges and Opportunities
Choo, K. R., Gritzalis, S., & Park, J. H. (2018) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2018.2841049 · Cited by 187 · see citing works
Assessing and augmenting SCADA cyber security: A survey of techniques
Nazir, S., Patel, S., & Patel, D. (2017) · Computers & Security · doi:10.1016/j.cose.2017.06.010 · Cited by 167 · see citing works
Implementing attacks for modbus/TCP protocol in a real-time cyber physical system test bed
Chen, B., Pattanaik, N., Goulart, A., Butler-Purry, K. L., & Kundur, D. (2015) · IEEE International Workshop Technical Committee on Communications Quality and Reliability (CQR) · doi:10.1109/cqr.2015.7129084 · Cited by 121 · see citing works
The Blaster Worm: Then and Now
Bailey, M., Cooke, E., Jahanian, F., et al. (2005) · IEEE Security & Privacy · doi:10.1109/msp.2005.106 · Cited by 121 · see citing works
Alves, T., Das, R., & Morris, T. H. (2018) · IEEE Embedded Systems Letters · doi:10.1109/les.2018.2823906 · Cited by 91 · see citing works
OpenPLC: An IEC 61,131–3 compliant open source industrial controller for cyber security research
Alves, T., & Morris, T. H. (2018) · Computers & Security · doi:10.1016/j.cose.2018.07.007 · Cited by 84 · see citing works
Roukounaki, A., Efremidis, S., Soldatos, J. K., Neises, J., Walloschke, T., & Kefalakis, N. (2019) · Global Internet of Things Summit (GIoTS) · doi:10.1109/giots.2019.8766407 · Cited by 80 · see citing works
Standards on cyber security assessment of smart grid
Leszczyna, R. (2018) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2018.05.006 · Cited by 79 · see citing works
Identifying SCADA vulnerabilities using passive and active vulnerability assessment techniques
Samtani, S., Yu, S., Zhu, H., Patton, M. W., & Chen, H. (2016) · IEEE International Conference on Intelligence and Security Informatics (ISI) · doi:10.1109/isi.2016.7745438 · Cited by 71 · see citing works
SCADA system security: Complexity, history and new developments
Cai, N., Wang, J., & Yu, X. (2008) · 2022 IEEE 20th International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2008.4618165 · Cited by 62 · see citing works
SCADAWall: A CPI-enabled firewall model for SCADA security
Li, D., Guo, H., Zhou, J., Zhou, L., & Wong, J. W. (2018) · Computers & Security · doi:10.1016/j.cose.2018.10.002 · Cited by 53 · see citing works
Smart Grid DNP3 Vulnerability Analysis and Experimentation
Darwish, I., Igbe, O., Celebi, O., Saadawi, T., & Soryal, J. (2015) · IEEE International Conference on Cyber Security and Cloud Computing (CSCloud) · doi:10.1109/cscloud.2015.86 · Cited by 51 · see citing works
Experimental and theoretical modeling of DNP3 attacks in smart grids
Darwish, I., Igbe, O., & Saadawi, T. (2015) · IEEE Sarnoff Symposium · doi:10.1109/sarnof.2015.7324661 · Cited by 47 · see citing works
Shaikh, F., Bou‐Harb, E., Neshenko, N., et al. (2018) · IEEE Communications Magazine · doi:10.1109/mcom.2018.1700685 · Cited by 44 · see citing works
Knapp, E. D., & Langill, J. T. (2011) · Elsevier eBooks · doi:10.1016/c2010-0-66555-2 · Cited by 39 · see citing works
Biometric Specifications for Personal Identity Verification
Grother, P. J., Salamon, W. J., & Chandramouli, R. (2013) · doi:10.6028/nist.sp.800-76-2 · Cited by 33 · see citing works
Achievement of secure Internet access to fieldbus systems
Sauter, T., & Schwaiger, C. (2002) · Microprocessors and Microsystems · doi:10.1016/s0141-9331(02)00044-3 · Cited by 28 · see citing works
Case Studies of SCADA Firewall Configurations and the Implications for Best Practices
Ranathunga, D., Roughan, M., Nguyen, H., Kernick, P., & Falkner, N. (2016) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2016.2597245 · Cited by 28 · see citing works
National Checklist Program for IT Products – Guidelines for Checklist Users and Developers
Quinn, S. D., Souppaya, M., Cook, M., & Scarfone, K. A. (2015) · doi:10.6028/nist.sp.800-70r3 · Cited by 18 · see citing works
European Reference Network for Critical Infrastructure Protection:ERNCIP Handbook 2018 edition
Peter, G. (2018) · Joint Research Centre (European Commission) · doi:10.2760/245080 · Cited by 3 · see citing works
Impact Analysis of Attacks Using Agent-Based SCADA Testbed
Rao, M. S., Kalluri, R., Kumar, R., Prasad, G., & Bindhumadhava, B. S. (2018) · Lecture notes in electrical engineering · doi:10.1007/978-981-10-8249-8_4 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Architecture and security of SCADA systems: A review
Yadav, G., & Paul, K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100433 · Cited by 261 · see citing works
Koay, A. M. Y., Ko, R. K. L., Hettema, H., & Radke, K. (2023) · Journal of Intelligent Information Systems · doi:10.1007/s10844-022-00753-1 · Cited by 131 · see citing works
A secure revocable fine-grained access control and data sharing scheme for SCADA in IIoT systems
Zhang, W., Zhang, H., Fang, L., Liu, Z., & Ge, C. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3091760 · Cited by 26 · see citing works
Upadhyay, D., Ghosh, S., Ohno, H., Zaman, M., & Sampalli, S. (2024) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2024.100705 · Cited by 18 · see citing works
Self-citation
- Authors
- Upadhyay, D., & Sampalli, S.
- Affiliations
- Dalhousie University (CA)
- Corresponding author
- Sampalli, Srinivas
- Venue
- Computers & Security
- Publisher
- Elsevier BV
- Published
- 2020-02
- Volume
- 89
- Pages
- 101666
- ISSN
- 0167-4048 (ISSN-L)
- OpenAlex
- W2987085812
- Semantic Scholar
- 19fa7be60694ac640651670154fb0734de7d02a0
- Cited by
- 242
- References
- 31
- Citations by year
- 2026: 18 · 2025: 43 · 2024: 50 · 2023: 41 · 2022: 34 · 2021: 35 · 2020: 21
- FWCI
- 12.46
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Computers & Security (publishedVersion)
- Funders
- Natural Sciences and Engineering Research Council of Canada
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Control and Systems Engineering › Industrial Automation and Control Systems
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- SCADA, supervisory control and data acquisition, industrial control systems, vulnerability assessment, security recommendations, cyber threats, vulnerability databases, industrial automation security, network interconnectivity
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
