The DOI matches its Crossref record; 31 of the 31 references it cites were found in a registry or an index.
Securing SCADA-based Critical Infrastructures: Challenges and Open Issues
Abstract
Conventionally, the security of critical infrastructures was mainly focused on environmental threats. Cyber attacks, nevertheless, have shifted the attention to various other threats and damages. The attackers try to exploit vulnerabilities in networks and Internet of Things (IoT) technologies, since these technologies are the integral part of the critical systems. Therefore, the vulnerability of Critical Infrastructure (CI) against cyber threats has led the need to devise modern security measures. Unavailability or failure of one CI can cause enormous devastation and damage to the society, economy and stability by provoking cascading failures to many other related infrastructures. Traditional security measures attempt to cater well-known emerging threats; however, strong and adaptive security measures/techniques are inevitable to defend against innovative attacks. This paper presents a survey on cyber threats and defense measures to highlight the necessity for securing SCADA-based critical infrastructures and provides an insight into the security challenges and open issues in this regard.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Figures
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“| Authentication Weaknesses | 89% | High | Credential stuffing, default passwords | Medium |”
From Cyber-Physical Risk Assessment for U.S. Water Utilities: A Comprehensive Analysis of SCADA and Operational Technology Vulnerabilities (2025) · cites this paper as Tariq et al. (2019)
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“| Network Segmentation | 76% | Critical | Lateral movement, privilege escalation | High |”
From Cyber-Physical Risk Assessment for U.S. Water Utilities: A Comprehensive Analysis of SCADA and Operational Technology Vulnerabilities (2025) · cites this paper as Tariq et al. (2019)
Experimental — accuracy not yet measuredThe check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“| Human-Machine Interface | 65% | Medium | Social engineering, insider threats | Medium |”
From Cyber-Physical Risk Assessment for U.S. Water Utilities: A Comprehensive Analysis of SCADA and Operational Technology Vulnerabilities (2025) · cites this paper as Tariq et al. (2019)
Experimental — accuracy not yet measuredIn the citing paper
“| Legacy System Integration | 71% | High | Protocol manipulation, system compromise | Very High |”
From Cyber-Physical Risk Assessment for U.S. Water Utilities: A Comprehensive Analysis of SCADA and Operational Technology Vulnerabilities (2025) · cites this paper as Tariq et al. (2019)
In the citing paper
“| Firmware/Software Updates | 82% | High | Known vulnerability exploitation | Low |”
From Cyber-Physical Risk Assessment for U.S. Water Utilities: A Comprehensive Analysis of SCADA and Operational Technology Vulnerabilities (2025) · cites this paper as Tariq et al. (2019)
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Kushner, D. (2013) · IEEE Spectrum · doi:10.1109/mspec.2013.6471059 · Cited by 630
Stellios, I., Kotzanikolaou, P., Psarakis, M., Alcaraz, C., & Lopez, J. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2855563 · Cited by 454
Critical infrastructure, panarchies and the vulnerability paths of cascading disasters
Pescaroli, G., & Alexander, D. (2016) · Natural Hazards · doi:10.1007/s11069-016-2186-3 · Cited by 415
TSDL: A Two-Stage Deep Learning Model for Efficient Network Intrusion Detection
Khan, F. A., Gumaei, A., Derhab, A., & Hussain, A. (2019) · IEEE Access · doi:10.1109/access.2019.2899721 · Cited by 353
Self-citationA survey of cyber security management in industrial control systems
Knowles, W., Prince, D., Hutchison, D., Disso, J. F. P., & Jones, K. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.02.002 · Cited by 344
(2011) · doi:10.1016/c2010-0-66555-2 · Cited by 306
The Security of Big Data in Fog-Enabled IoT Applications Including Blockchain: A Survey
Tariq, N., Asim, M., Al-Obeidat, F., Zubair Farooqi, M., Baker, T., Hammoudeh, M., & Ghafir, I. (2019) · Sensors · doi:10.3390/s19081788 · Cited by 268
Self-citationCyber security of critical infrastructures
Maglaras, L. A., Kim, K.-H., Janicke, H., Ferrag, M. A., Rallis, S., Fragkou, P., Maglaras, A., & Cruz, T. J. (2018) · ICT Express · doi:10.1016/j.icte.2018.02.001 · Cited by 178
An Experimental Security Analysis of an Industrial Robot Controller
Quarta, D., Pogliani, M., Polino, M., Maggi, F., Zanchettin, A. M., & Zanero, S. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.20 · Cited by 170
Assessing and augmenting SCADA cyber security: A survey of techniques
Nazir, S., Patel, S., & Patel, D. (2017) · Computers & Security · doi:10.1016/j.cose.2017.06.010 · Cited by 167
Research works printed but not linked: 6
- Ujvarosi, 2016, Evolution Of Scada Systems, Bulletin of the Transilvania University of Brasov. Engineering Sciences. Series I, 9, 63
- McMillan, 2010, Siemens: Stuxnet worm hit industrial systems, Computerworld, 14
- Constantin, 2014, New Havex malware variants target industrial control system and SCADA users, PC World, 4
- Formby, David, Srikar Durbha, and Raheem Beyah. (2017) “Out of control: Ransomware for industrial control systems” RSA Conference
- Beaumont, Peter, and S. Wolthusen. (2017) “Cyber-risks in maritime container ports: An analysis of threats and simulation of impacts” ISG MSc Information Security thesis series 2017
- Patil, 2019, Multi-Player Attack Detection Model for Smart Meter Security in Smart Grid Systems, International Journal of Applied Engineering Research, 14, 1488
Cited by
Architecture and security of SCADA systems: A review
Yadav, G., & Paul, K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100433 · Cited by 261
Cybersecurity for Industrial IoT (IIoT): Threats, countermeasures, challenges and future directions
Mekala, S. H., Baig, Z., Anwar, A., & Zeadally, S. (2023) · Computer Communications · doi:10.1016/j.comcom.2023.06.020 · Cited by 111
Aniebonam, S. O., & Aniebonam, C. P. (2025) · Journal of Environment, Climate, and Ecology · doi:10.69739/jece.v2i1.1031 · Cited by 7
David Echeverría López, A., Amor Pinilla, M., & Carvajal Mora, H. R. (2025) · IEEE Access · doi:10.1109/access.2025.3609252 · Cited by 1
Metadata
- Authors
- Tariq, N., Asim, M., & Khan, F. A.
- Venue
- Procedia Computer Science
- Publisher
- Elsevier BV
- Published
- 2019
- Volume
- 155
- Pages
- 612-617
- ISSN
- 1877-0509
- Cited by
- 56
- References
- 31
- Language
- en
- Licence
- www.elsevier.com/tdm/userlicense/1.0/ (tdm)
- www.elsevier.com/legal/tdmrep-license (tdm)
- creativecommons.org/licenses/by-nc-nd/4.0/ (vor, 234 d)
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Securing SCADA-based Critical Infrastructures: Challenges and Open Issues. https://app.cochat.ai/papers/10.1016/j.procs.2019.08.086
- The paper
- Tariq, N., Asim, M., & Khan, F. A. (2019). Securing SCADA-based Critical Infrastructures: Challenges and Open Issues. Procedia Computer Science. https://doi.org/10.1016/j.procs.2019.08.086
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
