A survey SCADA of and critical infrastructure incidents
Abstract
In this paper, we analyze several cyber-security incidents involving critical infrastructure and SCADA systems. We classify these incidents based on Source Sector, Method of Operations, Impact, and Target Sector. Using this standardized taxonomy we can easily compare and contrast current and future SCADA incidents.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Cyber attacks on CNI and SCADA have occurred over the last several decades.
“Over the last several decades we already saw a range of cyber attacks on CNI and SCADA.”
From A review of cyber security risk assessment methods for SCADA systems (2016) · cites this paper as Miller and Rowe, 2012
The number of cyber attacks on CNI increases over time.
“The analysis in Miller and Rowe (2012) indicates that the number of cyber attacks on CNI increases over time.”
From A review of cyber security risk assessment methods for SCADA systems (2016) · cites this paper as Miller and Rowe, 2012
Eclass is machine-interpretable and enables communication across devices and services in IoT networks using BMEcat, AutomationML, Administration shell and OPC UA data format, ensuring sector-independent semantic interoperability at the asset level.
“Although Eclass is predominantly oriented towards product classification and the related common data language, achieving a uniform application of relevant data across the development, manufacturing and sales phases, it is also machine-interpretable and thus enables communication across devices and services in IoT networks using BMEcat, AutomationML, Administration shell and OPC UA data format”
From SCADA Systems With Focus on Continuous Manufacturing and Steel Industry: A Survey on Architectures, Standards, Challenges and Industry 5.0 (2022) · cites this paper as [166]
Eclass provides standard descriptions of products and services together with their functions and structural elements based on the ISO, IEC and ETIM compliant data model with data structures implementing IEC 61360, ISO 13584 and German national DIN 4002 standards.
“Founded in 2000, Eclass [166] provides standard descriptions of products and services together with their functions and structural elements based on the ISO, IEC and ETIM compliant data model with data structures implementing IEC 61360, ISO 13584 and German national DIN 4002 standards”
From SCADA Systems With Focus on Continuous Manufacturing and Steel Industry: A Survey on Architectures, Standards, Challenges and Industry 5.0 (2022) · cites this paper as [166]
Cites
Stuxnet and the Future of Cyber War
Farwell, J. P., & Rohozinski, R. (2011) · Survival · doi:10.1080/00396338.2011.555586 · Cited by 956 · see citing works
SCADA security in the light of cyber-warfare
Nicholson, A., Webber, S., Dyer, S., Patel, T., & Janicke, H. (2012) · Computers & Security · doi:10.1016/j.cose.2012.02.009 · Cited by 334 · see citing works
Using Model-based Intrusion Detection for SCADA Networks
Cheung, S. W., Dutertre, B., Fong, M. W., Lindqvist, U., Skinner, K., & Valdes, A. (2006) · Cited by 321 · see citing works
A taxonomy and comparison of computer security incidents from the commercial and government sectors
Kjaerland, M. (2006) · Computers & Security · doi:10.1016/j.cose.2006.08.004 · Cited by 96 · see citing works
Cyber Incidents Involving Control Systems
Turk, R. J. (2005) · doi:10.2172/911775 · Cited by 78 · see citing works
Common vulnerabilities in critical infrastructure control systems.
Stamp, J. E., Dillinger, J., Young, W., & DePoy, J. (2003) · Cited by 68 · see citing works
Security of distributed control systems: the concern increases
Mustard, S. (2005) · Computing & Control Engineering Journal · doi:10.1049/cce:20050605 · Cited by 18 · see citing works
Communication security in SCADA pipeline monitoring systems
Tudorica, D. (2011) · doi:10.1109/roedunet.2011.5993706 · Cited by 17 · see citing works
(2011) · Computer Fraud & Security · doi:10.1016/s1361-3723(11)70108-7 · Cited by 10 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
A review of cyber security risk assessment methods for SCADA systems
Cherdantseva, Y., Burnap, P., Blyth, A., Eden, P., Jones, K., Soulsby, H., & Stoddart, K. (2016) · Computers & Security · doi:10.1016/j.cose.2015.09.009 · Cited by 606 · see citing works
A survey of cyber security management in industrial control systems
Knowles, W., Prince, D., Hutchison, D., Disso, J. F. P., & Jones, K. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.02.002 · Cited by 344 · see citing works
A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics
Pliatsios, D., Sarigiannidis, P., Lagkas, T., & Sarigiannidis, A. G. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.2987688 · Cited by 320 · see citing works
“Reports in [29] and [30] are showing an increasing number of security incidents and cyber attacks against critical SCADA infrastructure.”
BackgroundArchitecture and security of SCADA systems: A review
Yadav, G., & Paul, K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100433 · Cited by 261 · see citing works
Secure communication for the robot operating system
Breiling, B., Dieber, B., & Schartner, P. (2017) · 2017 Annual IEEE International Systems Conference (SysCon) · doi:10.1109/syscon.2017.7934755 · Cited by 97 · see citing works
Augmenting Zero Trust Network Architecture to enhance security in virtual power plants
Alagappan, A., Venkatachary, S. K., & Andrews, L. J. B. (2022) · Energy Reports · doi:10.1016/j.egyr.2021.11.272 · Cited by 81 · see citing works
Security issues in SCADA based industrial control systems
Babu, B., Ijyas, T., Muneer, P., & Varghese, J. (2017) · 2017 2nd International Conference on Anti-Cyber Crimes (ICACC) · doi:10.1109/anti-cybercrime.2017.7905261 · Cited by 73 · see citing works
Securing DNP3 broadcast communications in SCADA systems
Amoah, R., Camtepe, S., & Foo, E. (2016) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2016.2587883 · Cited by 72 · see citing works
False sequential logic attack on SCADA system and its physical impact analysis
Li, W., Xie, L., Deng, Z., & Wang, Z. (2016) · Computers & Security · doi:10.1016/j.cose.2016.01.001 · Cited by 71 · see citing works
Sverko, M., Grbac, T. G., & Mikuc, M. (2022) · IEEE Access · doi:10.1109/access.2022.3211288 · Cited by 71 · see citing works
A SCADA testbed for investigating cyber security vulnerabilities in critical infrastructures
Tesfahun, A., & Bhaskari, D. L. (2016) · Automatic Control and Computer Sciences · doi:10.3103/s0146411616010090 · Cited by 36 · see citing works
SCADA System Forensic Analysis Within IIoT
Eden, P., Blyth, A., Jones, K., Soulsby, H., Burnap, P., Cherdantseva, Y., & Stoddart, K. (2017) · Springer Series in Advanced Manufacturing · doi:10.1007/978-3-319-50660-9_4 · Cited by 34 · see citing works
- Authors
- Miller, B., & Rowe, D.
- Affiliations
- Brigham Young University (US)
- Venue
- Proceedings of the 1st Annual conference on Research in information technology
- Publisher
- ACM
- Published
- 2012-10-11
- Pages
- 51-56
- OpenAlex
- W2060479059
- Cited by
- 336
- References
- 9
- Citations by year
- 2026: 9 · 2025: 11 · 2024: 12 · 2023: 12 · 2022: 31 · 2021: 31 · 2020: 47 · 2019: 33 · 2018: 38 · 2017: 39 · 2016: 31 · 2015: 15 · 2014: 16 · 2013: 10 · 2012: 1
- FWCI
- 21.55
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- ACM Annual Conference on Research in Information Technology (RIIT) (publishedVersion)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Social Sciences › Political Science and International Relations › Cybersecurity and Cyber Warfare Studies
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- SCADA systems, critical infrastructure, cyber incidents, incident classification, industrial control systems
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
