The DOI matches its Crossref record; the references it cites are not checked yet.
The Role of Network Segmentation and Micro-Segmentation in Operational Technology Security
Abstract
Within critical sectors like manufacturing, electric-ity grids, and water treatment, cybersecurity in operational technology (OT) systems is highly important to managed industrial operations. With the increasing convergence between operational technology (OT) and information technology (IT) networks, they are now more vulnerable to cyber threats and thus require sophisticated security controls. This paper presents, we have presented a systematic literature review (SLR) in respect of network segmentation and micro-segmentation in improving OT security. These are barriers against the traffic of a network, reduce lateral movement of the attackers, and ensure secure perimeters for the protection of the critical infrastructure. The system incompatibility challenge of the legacy systems and the need to maintain high availability in the OT environment are highlighted as key challenges. Furthermore, it assesses existing best practices and identifies open research questions. This review offers practical steps to OT systems in the face of continually increasing OT cyber risks.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Network segmentation significantly minimizes the network's attack surface and enhances protection of the environment.
“This approach significantly minimizes the network's attack surface and enhances protection of the environment [18].”
From Encryption for Industrial Control Systems: A Survey of Application-Level and Network-Level Approaches in Smart Grids (2026) · cites this paper as [18]
Citations
The citation lists haven’t been fetched yet
References 7 · Cited by 6
Research works printed but not linked: 14
- Schwab, 2018, The state of industrial cybersecurity 2018
- Rajashekhar, 2017, Automation of network micro segmentation, 5, 6341
- Al-Ofeishat, 2024, Build a secure network using segmentation and micro-segmentation techniques, 16, 1499
- Kallatsa, 2024, Strategies for network segmentation: A systematic literature review
- Niedermaier, 2021, A secure network scanner architecture for asset management in strongly segmented ics networks, 1, 347
- Bashir, 2024, Zero trust architecture: Enhancing cybersecurity in enterprise networks, 6, 54
- Basta, 2022, Towards a zero-trust micro-segmentation network security strategy: An evaluation framework, 1
- Setola, 2020, Cyber threats for operational technologies, Int. J. Syst. Syst. Eng., 10
- Wagner, 2016, Towards automated cyber decision support: A case study on network segmentation for security
- Ma, 2023, Automatic generation of network micro-segmentation policies for cloud environments, 1
- Koay, 2022, Machine learning in industrial control system (ics) security: current landscape, opportunities and challenges, Springer Science+Business Media, 60, 377
- Shang, 2016, Design and implementation of industrial firewall for modbus/tcp, Academy Publisher, 432
- Soniya, 2016, Intrusion detection system: Classification and techniques
- Kreutz, 2014, Software-defined networking: A comprehensive survey
Metadata
- Authors
- Almulla, Z. T., & Rahman, H.
- Affiliations
- King Faisal University (SA)
- Venue
- 2025 International Conference on Artificial Intelligence in Information and Communication (ICAIIC)
- Publisher
- IEEE
- Published
- 2025-02-18
- Pages
- 0342-0347
- OpenAlex
- W4408611403
- Cited by
- 6
- References
- 7
- Citations by year
- 2026: 4 · 2025: 2
- FWCI
- 13.15
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Artificial Intelligence in Information and Communication (ICAIIC) (publishedVersion)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- network partitioning, micro-segmentation, operational technology security, industrial cybersecurity, critical infrastructure protection, lateral movement, legacy systems, high availability, IT-OT convergence, cybersecurity risks
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
