The DOI matches its Crossref record; 54 of the 62 references it cites were found in a registry or an index.
Cyber security risk assessment for SCADA and DCS networks
Abstract
The growing dependence of critical infrastructures and industrial automation on interconnected physical and cyber-based control systems has resulted in a growing and previously unforeseen cyber security threat to supervisory control and data acquisition (SCADA) and distributed control systems (DCSs). It is critical that engineers and managers understand these issues and know how to locate the information they need. This paper provides a broad overview of cyber security and risk assessment for SCADA and DCS, introduces the main industry organizations and government groups working in this area, and gives a comprehensive review of the literature to date. Major concepts related to the risk assessment methods are introduced with references cited for more detail. Included are risk assessment methods such as HHM, IIM, and RFRM which have been applied successfully to SCADA systems with many interdependencies and have highlighted the need for quantifiable metrics. Presented in broad terms is probability risk analysis (PRA) which includes methods such as FTA, ETA, and FEMA. The paper concludes with a general discussion of two recent methods (one based on compromise graphs and one on augmented vulnerability trees) that quantitatively determine the probability of an attack, the impact of the attack, and the reduction in risk associated with a particular countermeasure.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“ICS integrity is critical to OT security and the priority is to detect various security events and incidents, such as failure of devices and services exhausting resources early [100].”
From Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap (2021) · cites this paper as [100]
In the citing paper
“Risk assessment methods in general and in the context of SCADA systems specifically are hard to categorise as we con-clude based on our analysis and in agreement with Morgan (2013) and Ralston et al. (2007).”
From A review of cyber security risk assessment methods for SCADA systems (2016) · cites this paper as Ralston et al., 2007
In the citing paper
“An extensive overview of risk assessment meth-odologies is contained in Ralston et al. (2007), but only two methods are examined in detail.”
From A review of cyber security risk assessment methods for SCADA systems (2016) · cites this paper as Ralston et al., 2007
In the citing paper
“As pointed out in Morgan (2013) and Ralston et al. (2007), risk assessment methods as applied to SCADA systems are dif-ficult to categorise.”
From A review of cyber security risk assessment methods for SCADA systems (2016) · cites this paper as Ralston et al., 2007
In the citing paper
“In Cheminod et al. (2013), Patel et al. (2008), Ralston et al. (2007), Taylor et al. (2002), among proba-bilistic tree-based methods for SCADA systems inductive and deductive methods are distinguished.”
From A review of cyber security risk assessment methods for SCADA systems (2016) · cites this paper as Ralston et al., 2007
In the citing paper
“In 2007, in Ralston et al. (2007) it was mentioned that a “natural extension to PRA involves the use of fuzzy concepts, though this approach has not been published for use in SCADA system security risk assessment.””
From A review of cyber security risk assessment methods for SCADA systems (2016) · cites this paper as Ralston et al. (2007)
Citations
Cites
On the quantitative definition of risk
Kaplan, S., & Garrick, B. J. (1981) · Risk Analysis · doi:10.1111/j.1539-6924.1981.tb01350.x · Cited by 3,103
Attack trees : Modeling security threats
Schneier, B. (1999) · Medical Entomology and Zoology · Cited by 635
Risk Modeling, Assessment, And Management
Haimes, Y. Y. (1999) · IEEE Transactions on Systems Man and Cybernetics Part C (Applications and Reviews) · doi:10.1109/tsmcc.1999.760577 · Cited by 627
Probabilistic Risk Assessment and Management for Engineers and Scientists
Kumamoto, H., & Henley, E. J. (1996) · CERN Document Server (European Organization for Nuclear Research) · Cited by 618
Security issues in SCADA networks
Igure, V. M., Laughter, S. A., & Williams, R. D. (2006) · Computers & Security · doi:10.1016/j.cose.2006.03.001 · Cited by 566
Modeling and simulating critical infrastructures and their interdependencies
Rinaldi, S. M. (2004) · Proceedings of the ... Annual Hawaii International Conference on System Sciences/Proceedings of the Annual Hawaii International Conference on System Sciences · doi:10.1109/hicss.2004.1265180 · Cited by 431
Introduction to the OCTAVE Approach
Alberts, C., Dorofee, A., Stevens, J. F., & Woody, C. (2003) · doi:10.21236/ada634134 · Cited by 262
Attack Modeling for Information Security and Survivability
Moore, A. P., Ellison, R. J., & Linger, R. C. (2001) · doi:10.1184/r1/6572063.v1 · Cited by 259
Making the Nation Safer: The Role of Science and Technology in Countering Terrorism
Cohen, E. A. (2002) · Foreign Affairs · doi:10.2307/20033374 · Cited by 227
Attack Modeling for Information Security and Survivability
Moore, A. P., Ellison, R. J., & Linger, R. C. (2001) · doi:10.21236/ada387544 · Cited by 226
Research works printed but not linked: 16
- Smith, 2003, Connection to public communications increases danger of cyber-attacks, Pipeline and Gas Journal, 230, 20
- Watts D. Security & vulnerability in electric power systems. In: 35th North American Power Symposium. 2003. p. 559–66
- Oman P, Schweitzer E, Roberts J. Safeguarding IEDs, substations, and SCADA systems against electronic intrusions. In: Proceedings of the 2001 western power delivery automation conference. 2001. p. 9–12
- Novak, 2005, Merging SCADA and business processes, Plant Engineering, 59, 35
- Asenjo, 2005, Cybersecurity for legacy SCADA systems, Utility Automation and Engineering T&D, 10, 48
- 2005, Battling the cyber menace, PEI Power Engineering International, 13, 123
- SAAD AY. Securing supervisory control and data acquisition systems: Plant utilities: A special report. Hydrocarbon processing (International Ed.) 2002; 81(7); 55–6
- Byres, 2005, Insidious threat to control systems, InTech, 52, 28
- Byres, 2006, Uncovering cyber flaws, InTech, 53, 20
- Carlson, 2005, DHS to state its case to business, Eweek, 42, 20
- 2005, Honeywell reshapes industrial control world, Manufacturing Computer Solutions, 37
- Miller, 2005, Risk assessment: The first step, InTech, 52, 68
- How to do a Complete Automated Risk Assessment: A Methodology Review. Riskwatch White Paper, http://www.riskwatch.com/news/whitepapers/How_To_Do_A_Complete_Automated_Risk_Assessment_10-02RW.pdf; 2002 [accessed 4.1.2006]
- Ezell BC. Thesis/dissertation. University of Virginia: Systems Engineering Department; 1998
- Taylor C, Krings A, Alves-Foss J. Risk analysis and probabilistic survivability assessment (RAPSA): An assessment approach for power substation hardening. In: Proc. ACM workshop on scientific aspects of cyber terrorism. 2002. p. 1–9
- Schneier, 1999, Attack Trees, Dr. Dobb’s Journal, 24, 21
Cited by
Sorted by citations
Attacks against process control systems: risk assessment, detection, and response
Cárdenas, A. A., Amin, S., Lin, Z.-S., Huang, Y.-L., Huang, C.-Y., & Sastry, S. (2011) · Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security · doi:10.1145/1966913.1966959 · Cited by 699
A review of cyber security risk assessment methods for SCADA systems
Cherdantseva, Y., Burnap, P., Blyth, A., Eden, P., Jones, K., Soulsby, H., & Stoddart, K. (2016) · Computers & Security · doi:10.1016/j.cose.2015.09.009 · Cited by 606
Vikhram, G. Y. R., Elavarasan, R. M., Premkumar, M., & Mihet‐Popa, L. (2020) · IEEE Access · doi:10.1109/access.2020.3016826 · Cited by 396
Review of security issues in industrial networks
Cheminod, M., Durante, L., & Valenzano, A. (2013) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2012.2198666 · Cited by 349
A survey of cyber security management in industrial control systems
Knowles, W., Prince, D., Hutchison, D., Disso, J. F. P., & Jones, K. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.02.002 · Cited by 344
A review of attack graph and attack tree visual syntax in cyber security
Lallie, H. S., Debattista, K., & Bal, J. (2020) · Computer Science Review · doi:10.1016/j.cosrev.2019.100219 · Cited by 228
Review of cybersecurity issues in industrial critical infrastructure: manufacturing in perspective
Ani, U., He, H., & Tiwari, A. (2016) · Journal of Cyber Security Technology · doi:10.1080/23742917.2016.1252211 · Cited by 225
Quantified security is a weak hypothesis: a critical survey of results and assumptions
Verendel, V. (2009) · Proceedings of the 2009 workshop on New security paradigms workshop · doi:10.1145/1719030.1719036 · Cited by 180
Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap
Dhirani, L. L., Armstrong, E., & Newe, T. (2021) · Sensors · doi:10.3390/s21113901 · Cited by 172
“ICS integrity is critical to OT security and the priority is to detect various security events and incidents, such as failure of devices and services exhausting resources early [100].”
BackgroundAssessing and augmenting SCADA cyber security: A survey of techniques
Nazir, S., Patel, S., & Patel, D. (2017) · Computers & Security · doi:10.1016/j.cose.2017.06.010 · Cited by 167
“A survey of available tools for SCADA risk assessment is provided by Ralston et al. [92].”
MethodDevelopment capabilities for smart products
Tomiyama, T., Lutters, E., Stark, R., & Abramovici, M. (2019) · CIRP Annals · doi:10.1016/j.cirp.2019.05.010 · Cited by 179
Kandasamy, K., Srinivas, S., Achuthan, K., & Rangan, V. P. (2020) · EURASIP Journal on Information Security · doi:10.1186/s13635-020-00111-0 · Cited by 160
Cybersecurity for digital manufacturing
Wu, D., Ren, A., Zhang, W., Fan, F., Liu, P., Fu, X., & Terpenny, J. P. (2018) · Journal of Manufacturing Systems · doi:10.1016/j.jmsy.2018.03.006 · Cited by 160
A Survey on Cyber Security Threats in IoT-Enabled Maritime Industry
Ashraf, I., Park, Y., Hur, S., Kim, S. W., Alroobaea, R., Zikria, Y. B., & Nosheen, S. (2022) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2022.3164678 · Cited by 152
Paridari, K., O’Mahony, N., Mady, A. E., Chabukswar, R., Boubekeur, M., & Sandberg, H. (2017) · Proceedings of the IEEE · doi:10.1109/jproc.2017.2725482 · Cited by 143
IIoT cybersecurity risk modeling for SCADA systems
Falco, G., Caldera, C., & Shrobe, H. (2018) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2822842 · Cited by 137
Zhang, Q., Zhou, C., Xiong, N. N., Qin, Y., Li, X., & Huang, S. (2015) · IEEE Transactions on Systems Man and Cybernetics Systems · doi:10.1109/tsmc.2015.2503399 · Cited by 137
Cyber–physical interactions in power systems: A review of models, methods, and applications
Shi, L., Dai, Q., & Ni, Y. (2018) · Electric Power Systems Research · doi:10.1016/j.epsr.2018.07.015 · Cited by 134
Cyber security risk assessment for seaports: A case study of a container port
Güneş, B., Kayışoğlu, G., & Bolat, P. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102196 · Cited by 129
Distributed Resilient Secondary Control of DC Microgrids Against Unbounded Attacks
Zuo, S., Altun, T., Lewis, F. L., & Davoudi, A. A. (2020) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2020.2992118 · Cited by 123
A Master Attack Methodology for an AI-Based Automated Attack Planner for Smart Cities
Falco, G. J., Viswanathan, A., Caldera, C., & Shrobe, H. E. (2018) · IEEE Access · doi:10.1109/access.2018.2867556 · Cited by 121
Simulation for cybersecurity: state of the art and future directions
Kavak, H., Padilla, J. J., Vernon-Bido, D., Diallo, S. Y., Gore, R. J., & Shetty, S. S. (2021) · Journal of Cybersecurity · doi:10.1093/cybsec/tyab005 · Cited by 130
An Internet-wide view of ICS devices
Mirian, A., Ma, Z., Adrian, D., Tischer, M., Chuenchujit, T., Yardley, T., Berthier, R., Mason, J., Durumeric, Z., Halderman, J. A., et al. (2016) · Conference on Privacy, Security and Trust · doi:10.1109/pst.2016.7906943 · Cited by 115
Cybersecurity risk analysis model using fault tree analysis and fuzzy decision theory
de Gusmão, A. P. H., Silva, M. M., Poleto, T., Silva, L. C. E., & Costa, A. P. C. S. (2018) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2018.08.008 · Cited by 109
Human factor security: evaluating the cybersecurity capacity of the industrial workforce
Ani, U., He, H., & Tiwari, A. (2018) · Journal of Systems and Information Technology · doi:10.1108/jsit-02-2018-0028 · Cited by 108
Distributed event-triggered consensus of multi-agent systems under periodic DoS jamming attacks
Cheng, Z., Yue, D., Hu, S., Ge, H. L., & Chen, L. (2019) · Neurocomputing · doi:10.1016/j.neucom.2019.03.089 · Cited by 96
Cybersecurity Hazards and Financial System Vulnerability: A Synthesis of Literature
Uddin, M. H., Ali, M. H., & Hassan, M. K. (2020) · Risk Management · doi:10.1057/s41283-020-00063-2 · Cited by 141
Applications in Security and Evasions in Machine Learning: A Survey
Sagar, R. V., Jhaveri, R. H., & Borrego, C. (2020) · Electronics · doi:10.3390/electronics9010097 · Cited by 94
Port cybersecurity and threat: a structural model for prevention and policy development
Senarak, C. (2021) · The Asian Journal of Shipping and Logistics · doi:10.1016/j.ajsl.2020.05.001 · Cited by 94
Zhang, Y., Wang, L., Xiang, Y., & Ten, C. (2016) · IEEE Transactions on Power Systems · doi:10.1109/tpwrs.2015.2510626 · Cited by 84
Key management issue in SCADA networks: A review
Rezai, A., Keshavarzi, P., & Moravej, Z. (2016) · Engineering Science and Technology an International Journal · doi:10.1016/j.jestch.2016.08.011 · Cited by 80
Cyber Resilience and Incident Response in Smart Cities: A Systematic Literature Review
Ahmadi‐Assalemi, G., Al‐Khateeb, H., Epiphaniou, G., & Maple, C. R. (2020) · Smart Cities · doi:10.3390/smartcities3030046 · Cited by 78
Restraint under conditions of uncertainty: Why the United States tolerates cyberattacks
Kaminska, M. (2021) · Journal of Cybersecurity · doi:10.1093/cybsec/tyab008 · Cited by 79
Unsupervised Learning Approach for Anomaly Detection in Industrial Control Systems
Choi, W.-H., & Kim, J. (2024) · Applied System Innovation · doi:10.3390/asi7020018 · Cited by 74
Does digital transformation matter for operational risk exposure?
Uddin, M. H., Mollah, S., Islam, N., & Ali, M. H. (2023) · Technological Forecasting and Social Change · doi:10.1016/j.techfore.2023.122919 · Cited by 73
Lallie, H. S., Debattista, K., & Bal, J. (2017) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2771238 · Cited by 73
Alqudhaibi, A., Albarrak, M., Aloseel, A., Jagtap, S., & Salonitis, K. (2023) · Sensors · doi:10.3390/s23094539 · Cited by 72
A Survey of Cyber-Physical Power System Modeling Methods for Future Energy Systems
Abdelmalak, M. M., Venkataramanan, V., & Macwan, R. (2022) · IEEE Access · doi:10.1109/access.2022.3206830 · Cited by 71
Cybersecurity Challenges for Manufacturing Systems 4.0: Assessment of the Business Impact Level
Corallo, A., Lazoi, M., Lezzi, M., & Pontrandolfo, P. (2021) · IEEE Transactions on Engineering Management · doi:10.1109/tem.2021.3084687 · Cited by 69
Dynamic Risk Assessment in Cybersecurity: A Systematic Literature Review
Cheimonidis, P., & Rantos, K. (2023) · Future Internet · doi:10.3390/fi15100324 · Cited by 66
SoK: Cyber Insurance – Technical Challenges and a System Security Roadmap
Dambra, S., Bilge, L., & Balzarotti, D. (2020) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40000.2020.00019 · Cited by 65
Security, Privacy and Safety Risk Assessment for Virtual Reality Learning Environment Applications
Gulhane, A., Vyas, A., Mitra, R., Oruche, R., Hoefer, G., Valluripally, S., Calyam, P., & Hoque, K. A. (2019) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc.2019.8651847 · Cited by 63
Moustafa, N., Misra, G., & Slay, J. (2018) · IEEE Transactions on Sustainable Computing · doi:10.1109/tsusc.2018.2808430 · Cited by 63
Yan, L., Huang, G.-Q., Wang, C.-Z., & Li, Y.-C. (2019) · EURASIP Journal on Wireless Communications and Networking · doi:10.1186/s13638-019-1506-1 · Cited by 61
An event buffer flooding attack in DNP3 controlled SCADA systems
Jin, D., Nicol, D. M., & Yan, G. (2011) · Proceedings of the 2011 Winter Simulation Conference (WSC) · doi:10.1109/wsc.2011.6147969 · Cited by 56
Cyber risk and insurance for transportation infrastructure
Tonn, G. L., Kesan, J. P., Zhang, L., & Czajkowski, J. R. (2019) · Transport Policy · doi:10.1016/j.tranpol.2019.04.019 · Cited by 54
Kim, K. H., Kim, K., & Kim, H. K. (2022) · ETRI Journal · doi:10.4218/etrij.2021-0181 · Cited by 53
Islam, M. A., & Arju, M. A. A. S. (2023) · doi:10.63125/rg8mt373 · Cited by 51
Smart Grid DNP3 Vulnerability Analysis and Experimentation
Darwish, I., Igbe, O., Celebi, O., Saadawi, T., & Soryal, J. (2015) · IEEE International Conference on Cyber Security and Cloud Computing (CSCloud) · doi:10.1109/cscloud.2015.86 · Cited by 51
Cyber security risk management in the SCADA critical infrastructure environment
Henrie, M. (2013) · Engineering Management Journal · doi:10.1080/10429247.2013.11431973 · Cited by 50
Formal Vulnerability Analysis of a Security System for Remote Fieldbus Access
Cheminod, M., Pironti, A., & Sisto, R. (2011) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2010.2099233 · Cited by 46
Secure SCADA communication by using a modified key management scheme
Rezai, A., Keshavarzi, P., & Moravej, Z. (2013) · ISA Transactions · doi:10.1016/j.isatra.2013.02.005 · Cited by 45
Application of Functional Analysis on a SCADA System of a Thermal Power Plant
Lakhoua, M. N. (2009) · Advances in Electrical and Computer Engineering · doi:10.4316/aece.2009.02014 · Cited by 44
Towards quantifying the impacts of cyber attacks in the competitive electricity market environment
Negrete-Pincetic, M., Yoshida, F., & Gross, G. (2009) · doi:10.1109/ptc.2009.5282237 · Cited by 43
Wang, H., Lau, N. K. C., & Gerdes, R. (2018) · Human Factors The Journal of the Human Factors and Ergonomics Society · doi:10.1177/0018720818769250 · Cited by 41
Albalawi, F., Durand, H., & Christofides, P. D. (2017) · Computers & Chemical Engineering · doi:10.1016/j.compchemeng.2017.10.006 · Cited by 41
Uncovering Vulnerable Industrial Control Systems from the Internet Core
Nawrocki, M., Schmidt, T. C., & Wählisch, M. (2020) · IEEE/IFIP Network Operations and Management Symposium (NOMS) · doi:10.1109/noms47738.2020.9110256 · Cited by 41
Processing and packaging automation systems: a review
Mahalik, N. P. (2009) · Sensing and Instrumentation for Food Quality and Safety · doi:10.1007/s11694-009-9076-2 · Cited by 38
Threats, Countermeasures and Attribution of Cyber Attacks on Critical Infrastructures
Maglaras, L. A., Ferrag, M. A., Derhab, A., Mukherjee, M., Janicke, H., & Rallis, S. (2018) · ICST Transactions on Security and Safety · doi:10.4108/eai.15-10-2018.155856 · Cited by 38
Association Analysis-Based Cybersecurity Risk Assessment for Industrial Control Systems
Qin, Y., Yuan, P., Huang, K., Zhou, C., & Tian, Y. (2020) · IEEE Systems Journal · doi:10.1109/jsyst.2020.3010977 · Cited by 38
Robustness of Optimal Investment Decisions in Mixed Insurance/Investment Cyber Risk Management
Mazzoccoli, A., & Naldi, M. (2019) · Risk Analysis · doi:10.1111/risa.13416 · Cited by 36
Senarak, C. (2021) · The Asian Journal of Shipping and Logistics · doi:10.1016/j.ajsl.2021.10.002 · Cited by 36
A Novel Risk Assessment Methodology for SCADA Maritime Logistics Environments
Kalogeraki, E.-M., Papastergiou, S., Mouratidis, H., & Polemi, N. (2018) · Applied Sciences · doi:10.3390/app8091477 · Cited by 36
Cybersecurity risk assessment of VDR
Söner, Ö., Kayışoğlu, G., Bolat, P., & Tam, K. (2023) · Journal of Navigation · doi:10.1017/s0373463322000595 · Cited by 35
Anomaly detection in SCADA systems : a network based approach
Barbosa, R. R. R. (2014) · doi:10.3990/1.9789036536455 · Cited by 35
A new cyber security risk evaluation method for oil and gas SCADA based on factor state space
Yang, L., Cao, X., & Li, J. (2015) · Chaos Solitons & Fractals · doi:10.1016/j.chaos.2015.10.030 · Cited by 34
Security risks in cyber physical systems—A systematic mapping study
Zahid, M., Inayat, I., Daneva, M., & Mehmood, Z. (2021) · Journal of Software Evolution and Process · doi:10.1002/smr.2346 · Cited by 33
Detecting Chains of Vulnerabilities in Industrial Networks
Cheminod, M., Bertolotti, I. C., Durante, L., Maggi, P., Pozza, D., Sisto, R., & Valenzano, A. (2009) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2009.2018627 · Cited by 32
Understanding the Methods behind Cyber Terrorism
Dawson, M. E., Omar, M., & Abramson, J. (2014) · Advances in information quality and management · doi:10.4018/978-1-4666-5888-2.ch147 · Cited by 32
Resource Allocation in Networking and Computing Systems: A Security and Dependability Perspective
Khan, M. I., & Nencioni, G. (2023) · IEEE Access · doi:10.1109/access.2023.3306534 · Cited by 32
Toward Authenticating the Master in the Modbus Protocol
Liao, G., Chen, Y.-J., Lu, W.-C., & Cheng, T.-C. (2008) · IEEE Transactions on Power Delivery · doi:10.1109/tpwrd.2008.2002942 · Cited by 32
Tubis, A. A., Werbińska-Wojciechowska, S., Góralczyk, M., Wroblewski, A. C., & Ziętek, B. (2020) · Sensors · doi:10.3390/s20247210 · Cited by 31
Dehmer, M., Meyer-Nieberg, S., Mihelcic, G., Pickl, S., & Zsifkovits, M. (2015) · EURO Journal on Decision Processes · doi:10.1007/s40070-015-0046-0 · Cited by 31
GRAPH NEURAL NETWORK MODELS FOR PREDICTING CYBER ATTACK PATTERNS IN CRITICAL INFRASTRUCTURE SYSTEMS
Biswas, S., USA, Dhanekula, A., & CloudData Technologies, B. A. (2024) · doi:10.63125/pmnqxk63 · Cited by 30
Khalil, Y. F. (2016) · Process Safety and Environmental Protection · doi:10.1016/j.psep.2016.05.001 · Cited by 30
Characteristic insights on industrial cyber security and popular defense mechanisms
Wan, M., Li, J., Liu, Y., Zhao, J., & Wang, J. (2021) · China Communications · doi:10.23919/jcc.2021.01.012 · Cited by 29
Detection and analysis of cybersecurity challenges for processing systems
Liu, L., Sajid, Z., Kravaris, C., & Khan, F. I. (2024) · Process Safety and Environmental Protection · doi:10.1016/j.psep.2024.03.088 · Cited by 28
Bibliometric analysis of cybercrime and cybersecurity risks literature
Nobanee, H., Alodat, A. Y., Bajodah, R., Al-Ali, M., & Darmaki, A. A. (2023) · Journal of Financial Crime · doi:10.1108/jfc-11-2022-0287 · Cited by 27
Assessment of SCADA System Vulnerabilities
Yadav, G., & Paul, K. (2019) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa.2019.8869541 · Cited by 27
Alhakami, W. (2023) · Processes · doi:10.3390/pr11051366 · Cited by 25
Cyber security, building automation, and the intelligent building
Fisk, D. (2012) · Intelligent Buildings International · doi:10.1080/17508975.2012.695277 · Cited by 25
Busby, J. S., Green, B., & Hutchison, D. (2017) · Risk Analysis · doi:10.1111/risa.12681 · Cited by 25
Zuo, S., Wang, Y., Rajabinezhad, M., & Zhang, Y. (2023) · IEEE Transactions on Control of Network Systems · doi:10.1109/tcns.2023.3338772 · Cited by 24
Park, J. W., & Lee, S. J. (2020) · Annals of Nuclear Energy · doi:10.1016/j.anucene.2020.107432 · Cited by 23
Shahzad, A., Lee, M., Kim, H., Woo, S.-M., & Xiong, N. N. (2015) · Symmetry · doi:10.3390/sym7041945 · Cited by 23
A Fuzzy AHP Approach for Security Risk Assessment in SCADA Networks
Marković-Petrović, J. D., Stojanović, M. D., & Rakas, S. V. B. (2019) · Advances in Electrical and Computer Engineering · doi:10.4316/aece.2019.03008 · Cited by 23
Lee, C., Yim, H. B., & Seong, P. H. (2017) · Annals of Nuclear Energy · doi:10.1016/j.anucene.2017.11.002 · Cited by 22
Cyber-security risk assessment framework for critical infrastructures
Baig, Z. A., & Zeadally, S. (2018) · Intelligent Automation & Soft Computing · doi:10.31209/2018.100000049 · Cited by 22
Kelli, V., Grammatikis, P. I. R., Λάγκας, Θ., Markakis, E., & Sarigiannidis, P. G. (2022) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr54599.2022.9850291 · Cited by 25
Privacy preserving federated learning for full heterogeneity
Chen, K., Zhang, X., Zhou, X., Mi, B., Xiao, Y., Zhou, L., Wu, Z., Wu, L., & Wang, X. (2023) · ISA Transactions · doi:10.1016/j.isatra.2023.04.020 · Cited by 26
Computational Intelligence Algorithms Analysis for Smart Grid Cyber Security
Wang, Y., Ruan, D., Xu, J., Wen, M., & Deng, L. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-13498-2_11 · Cited by 22
Advance hybrid key management architecture for SCADA network security
Rezai, A., Keshavarzi, P., & Moravej, Z. (2016) · Security and Communication Networks · doi:10.1002/sec.1612 · Cited by 22
Malware propagation effects on SCADA system and smart power grid
Akhtar, T., Gupta, B. B., & Yamaguchi, S. (2018) · International Conference on Consumer Electronics · doi:10.1109/icce.2018.8326281 · Cited by 22
Role of Cyber Security in Today's Scenario
Khari, M., Shrivastava, G., Gupta, S., & Gupta, R. (2017) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-5225-2154-9.ch013 · Cited by 21
Probabilistic safety assessment-based importance analysis of cyber-attacks on nuclear power plants
Park, J. W., & Lee, S. J. (2018) · Nuclear Engineering and Technology · doi:10.1016/j.net.2018.09.009 · Cited by 21
Chen, Q., Abercrombie, R. K., & Sheldon, F. T. (2015) · Journal of Artificial Intelligence and Soft Computing Research · doi:10.1515/jaiscr-2015-0029 · Cited by 21
Vulnerabilities of Control Systems in Internet of Things Applications
Radisavljević-Gajić, V., Park, S., & Chasaki, D. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2787962 · Cited by 21
Backdoor attacks against distributed swarm learning
Chen, K., Zhang, H., Feng, X., Zhang, X., Mi, B., & Jin, Z. (2023) · ISA Transactions · doi:10.1016/j.isatra.2023.03.034 · Cited by 20
A Novel Security Risk Analysis Using the AHP Method in Smart Railway Systems
Avcı, İ., & Koca, M. (2024) · Applied Sciences · doi:10.3390/app14104243 · Cited by 20
Survey of cyber risk analysis techniques for use in the nuclear industry
Eggers, S. L., & Blanc, K. L. L. (2021) · Progress in Nuclear Energy · doi:10.1016/j.pnucene.2021.103908 · Cited by 20
Metadata
- Authors
- Ralston, P. A. S., Graham, J. H., & Hieb, J. L.
- Affiliations
- University of Louisville (US)
- Corresponding author
- Ralston, P.A.S.
- ORCID
- Ralston, P.A.S.
- Venue
- ISA Transactions
- Publisher
- Elsevier BV
- Published
- 2007-10
- Volume
- 46
- Issue
- 4
- Pages
- 583-594
- ISSN
- 0019-0578 (ISSN-L)
- OpenAlex
- W2050588495
- Cited by
- 267
- References
- 62
- Citations by year
- 2026: 5 · 2025: 8 · 2024: 18 · 2023: 15 · 2022: 10 · 2021: 18 · 2020: 26 · 2019: 34 · 2018: 27 · 2017: 18 · 2016: 17 · 2015: 13 · 2014: 11 · 2013: 8 · 2012: 12
- FWCI
- 12.61
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- ISA Transactions (publishedVersion)
- PubMed (publishedVersion)
- Funders
- U.S. Department of Homeland Security
- Furman University
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Engineering › Safety, Risk, Reliability and Quality › Risk and Safety Analysis
- Keywords
- cybersecurity risk assessment, SCADA systems, distributed control systems, industrial control systems, critical infrastructure, risk assessment methodology, HAZOP, fault tree analysis, event tree analysis, failure mode and effects analysis, attack probability
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
