The DOI matches its Crossref record; 1 of the 1 references it cites were found in a registry or an index.
A New Evaluation Model for Information Security Risk Management of SCADA Systems
Abstract
Supervisory control and data acquisition (SCADA) systems are becoming increasingly susceptible to cyber-physical attacks on both physical and cyber layers of critical information infrastructure. Failure Mode and Effects Analysis (FMEA) have been widely used as a structured method to prioritize all possible vulnerable areas (failure modes) for design review of security of information systems. However, traditional RPN based FMEA has some inherent problems. Besides, there is a lacking of application of FMEA for security in SCADAs under vague and uncertain environment. Thus, the main purpose of this study was to propose a new evaluation model, which not only intends to recover above mentioned problems, but also intends to evaluate, prioritize and correct security risk of SCADA system's threat modes. A numerical case study was also conducted to demonstrate that the proposed new evaluation model is not only capable of addressing FMEA's inherent problems but also is best suited for a semi-quantitative high level analysis of a secure SCADA's failure modes in the early design phases.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“The evaluation models created by Lin (2019) proved how the conventional methods of information security risk management could be insufficient and fail to respond to the specific demands of SCADA systems, which results in the continuation of vulnerabilities that could be treated as negligible in IT systems but pose serious threats in OT systems.”
From Cyber-Physical Risk Assessment for U.S. Water Utilities: A Comprehensive Analysis of SCADA and Operational Technology Vulnerabilities (2025) · cites this paper as Lin (2019)
Citations
Cites
A review of cyber security risk assessment methods for SCADA systems
Cherdantseva, Y., Burnap, P., Blyth, A., Eden, P., Jones, K., Soulsby, H., & Stoddart, K. (2016) · Computers & Security · doi:10.1016/j.cose.2015.09.009 · Cited by 606 · cited 1×
“A SCADA system typically includes monitor and control components such as Master Terminal Units (MTUs), Remote Terminal Units (RTUs), Human Machine Interface (HMI), Programmable Logic Controllers (PLCs), Intelligent Electronic Devices (IEDs), sensors and actuators [9].”
Background
Research works printed but not linked: 14
- 10.1109/21.229476 · DOI
- 10.1016/0165-0114(94)90084-1 · DOI
- lin, 2016, A novel vague set based score function for multi-criteria fuzzy decision making, WSEAS Trans Math, 8, 1
- 10.1109/iFUZZY.2017.8311795 · DOI
- lin, 0, Efficient and rational multi-criteria group decision making method based on vague set theory, Computer Press
- 2018, AIAG-VDA Failure Mode and Effect Analysis Handbook
- 10.1016/j.ijinfomgt.2014.07.005 · DOI
- 10.1186/s40887-018-0025-1 · DOI
- 10.1007/s00500-009-0403-7 · DOI
- 10.1016/0951-8320(95)00068-D · DOI · Paper page
- 10.1016/j.dss.2009.08.005 · DOI
- 10.1108/02656710110383737 · DOI
- stamatis, 2003, Failure Mode and Effect Analysis FMEA from Theory to Execution
- 2015, Special Publication 800-82 Revision 2 Guide to industrial control systems security
Cited by
Sorted by citations
Aniebonam, S. O., & Aniebonam, C. P. (2025) · Journal of Environment, Climate, and Ecology · doi:10.69739/jece.v2i1.1031 · Cited by 7
Metadata
- Authors
- Lin, K.-S.
- Affiliations
- Aletheia University (TW)
- Corresponding author
- Lin, Kuo-Sui
- Venue
- 2019 IEEE International Conference on Industrial Cyber Physical Systems (ICPS)
- Publisher
- IEEE
- Published
- 2019-05
- Volume
- 8
- Pages
- 757-762
- OpenAlex
- W2965797544
- Cited by
- 4
- References
- 1
- Citations by year
- 2024: 3 · 2020: 1
- FWCI
- 0.20
- Type
- conference paper
- Language
- en
- Open access
- closed
- Licence
- Locations
- IEEE International Conference on Industrial Cyber-Physical Systems (ICPS) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Safety, Risk, Reliability and Quality › Risk and Safety Analysis
- Keywords
- SCADA systems, information security risk management, failure mode and effects analysis, risk prioritization, risk assessment model, cyber-physical attacks, critical infrastructure security, uncertainty and vagueness, semi-quantitative risk analysis
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
