Cybersecurity of industrial cyber-physical systems: A review
Open accessAbstract
Industrial cyber-physical systems ( ICPSs ) manage critical infrastructures by controlling the processes based on the “physics” data gathered by edge sensor networks. Recent innovations in ubiquitous computing and communication technologies have prompted the rapid integration of highly interconnected systems to ICPSs. Hence, the “security by obscurity” principle provided by air-gapping is no longer followed. As the interconnectivity in ICPSs increases, so does the attack surface. Industrial vulnerability assessment reports have shown that a variety of new vulnerabilities have occurred due to this transition. Although there are existing surveys in this context, very little is mentioned regarding the outputs of these reports. While these reports show that the most exploited vulnerabilities occur due to weak boundary protection, these vulnerabilities also occur due to limited or ill-defined security policies. However, current literature focuses on intrusion detection systems ( IDSs ), network traffic analysis ( NTA ) methods, or anomaly detection techniques. Hence, finding a solution for the problems mentioned in these reports is relatively hard. We bridge this gap by defining and reviewing ICPSs from a cybersecurity perspective. In particular, multi-dimensional adaptive attack taxonomy is presented and utilized for evaluating real-life ICPS cyber incidents. Finally, we identify the general shortcomings and highlight the points that cause a gap in existing literature while defining future research directions.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The focus of most of the surveys for CPS is on security and privacy.
“The focus of most of the surveys for CPS is on security and privacy (e.g., [84,85,93,96,102,112,113,119,124]).”
From A Systematic Review of Data Quality in CPS and IoT for Industry 4.0 (2023) · cites this paper as [102]
As ICS and CPS become more interconnected, they become vulnerable to cyber threats that were previously uncommon in isolated industrial environments.
“However, as ICS and CPS become more interconnected, they become vulnerable to cyber threats that were previously uncommon in isolated industrial environments [5-8].”
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Wireless sensor networks: a survey
Akyildiz, I. F., Su, W., Sankarasubramaniam, Y., & Cayirci, E. (2002) · Computer Networks · doi:10.1016/s1389-1286(01)00302-4 · Cited by 17,523 · see citing works
Internet of Things in industries: A survey
Xu, L. D., He, W., & Li, S. (2014) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2014.2300753 · Cited by 5,172 · see citing works
A Cyber-Physical Systems architecture for Industry 4.0-based manufacturing systems
Lee, J., Bagheri, B., & Kao, H.-A. (2015) · Manufacturing Letters · doi:10.1016/j.mfglet.2014.12.001 · Cited by 5,113 · see citing works
Lasi, H., Fettke, P., Kemper, H.-G., Feld, T., & Hoffmann, M. (2014) · Business & Information Systems Engineering · doi:10.1007/s12599-014-0334-4 · Cited by 4,276 · cited 1× · see citing works
“Industry 4.0 [94] and Industrial Internet [53] have accelerated integration of industrial cyber-physical systems (ICPSs) [139] with various industries, from manufacturing [96] to energy management [127], water treatment systems [177], and many more [29, 147, 186].”
BackgroundInfluentialCyber Physical Systems: Design Challenges
Lee, E. A. (2008) · IEEE International Symposium on Real-Time Distributed Computing (ISORC) · doi:10.1109/isorc.2008.25 · Cited by 3,638 · see citing works
Wireless integrated network sensors
Pottie, G. J., & Kaiser, W. J. (2000) · Communications of the ACM · doi:10.1145/332833.332838 · Cited by 3,229 · see citing works
Context Aware Computing for The Internet of Things: A Survey
Perera, C., Zaslavsky, A., Christen, P., & Georgakopoulos, D. (2014) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2013.042313.00197 · Cited by 2,861 · cited 1× · see citing works
“Context-awareness [197] is a promising feature that we expect to see in further adaptive ICPS edge security related studies.”
BackgroundSelf-citationSurvey of intrusion detection systems: Techniques, datasets and challenges
Khraisat, A., Gondal, I., Vamplew, P., & Kamruzzaman, J. (2019) · Cybersecurity · doi:10.1186/s42400-019-0038-7 · Cited by 2,024 · see citing works
Rajkumar, R., Lee, I., Sha, L., & Stankovic, J. A. (2010) · ACM/IEEE Design Automation Conference (DAC) · doi:10.1145/1837274.1837461 · Cited by 1,990 · see citing works
Stuxnet: Dissecting a cyberwarfare weapon
Langner, R. (2011) · IEEE Security & Privacy Magazine · doi:10.1109/msp.2011.67 · Cited by 1,922 · see citing works
A survey of network anomaly detection techniques
Ahmed, M., Mahmood, A., & Hu, J.-K. (2016) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2015.11.016 · Cited by 1,708 · see citing works
Industrial Wireless Sensor Networks: Challenges, Design Principles, and Technical Approaches
Güngör, V. Ç., & Hancke, G. P. (2009) · IEEE Transactions on Industrial Electronics · doi:10.1109/tie.2009.2015754 · Cited by 1,683 · see citing works
Understanding the Limits of LoRaWAN
Adelantado, F., Vilajosana, X., Tuset‐Peiró, P., Martinez, B., Melià‐Seguí, J., & Watteyne, T. (2017) · IEEE Communications Magazine · doi:10.1109/mcom.2017.1600613 · Cited by 1,521 · see citing works
Security in wireless sensor networks
Perrig, A., Stankovic, J. A., & Wagner, D. A. (2004) · Communications of the ACM · doi:10.1145/990680.990707 · Cited by 1,464 · see citing works
Understanding the mirai botnet
Antonakakis, M., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J. A., Invernizzi, L., Kallitsis, M., et al. (2017) · USENIX Security Symposium · Cited by 1,362 · see citing works
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
A survey on security control and attack detection for industrial cyber-physical systems
Ding, D., Han, Q., Xiang, Y., Ge, X., & Zhang, X. (2017) · Neurocomputing · doi:10.1016/j.neucom.2017.10.009 · Cited by 947 · see citing works
Security and privacy challenges in industrial internet of things
Sadeghi, A., Wachsmann, C., & Waidner, M. (2015) · Proceedings - ACM IEEE Design Automation Conference · doi:10.1145/2744769.2747942 · Cited by 920 · see citing works
A survey of intrusion detection techniques for cyber-physical systems
Mitchell, R., & Chen, I.-R. (2014) · ACM Computing Surveys · doi:10.1145/2542049 · Cited by 768 · see citing works
Smart Grids: A Cyber–Physical Systems Perspective
Yu, X., & Xue, Y. (2016) · Proceedings of the IEEE · doi:10.1109/jproc.2015.2503119 · Cited by 726 · see citing works
Lessons Learned from the Maroochy Water Breach
Slay, J., & Miller, M. (2007) · Critical Infrastructure Protection · doi:10.1007/978-0-387-75462-8_6 · Cited by 721 · see citing works
Common Vulnerability Scoring System
Mell, P., Scarfone, K. A., & Romanosky, S. (2006) · IEEE Security & Privacy · doi:10.1109/msp.2006.145 · Cited by 691 · see citing works
A Survey on Industrial Internet of Things: A Cyber-Physical Systems Perspective
Xu, H., Yu, W., Griffith, D., & Golmie, N. (2018) · IEEE Access · doi:10.1109/access.2018.2884906 · Cited by 637 · see citing works
Cloud manufacturing: Strategic vision and state-of-the-art
Wu, D., Greer, M. J., Rosen, D. W., & Schaefer, D. (2013) · Journal of Manufacturing Systems · doi:10.1016/j.jmsy.2013.04.008 · Cited by 556 · see citing works
A review of industrial wireless networks in the context of Industry 4.0
Li, X., Li, D., Wan, J., Vasilakos, A. V., Lai, C., & Wang, S. (2015) · Wireless Networks · doi:10.1007/s11276-015-1133-7 · Cited by 556 · see citing works
Introduction to Industrial Control Networks
Galloway, B., & Hancke, G. P. (2012) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2012.071812.00124 · Cited by 550 · see citing works
Stuxnet worm impact on industrial cyber-physical system security
Karnouskos, S. (2011) · Annual Conference of the IEEE Industrial Electronics Society (IECON) · doi:10.1109/iecon.2011.6120048 · Cited by 542 · see citing works
A survey of physics-based attack detection in cyber-physical systems
Giraldo, J., Urbina, D., Cardenas, A., Valente, J., Faisal, M., Ruths, J., Tippenhauer, N. O., Sandberg, H., & Candell, R. (2019) · ACM Computing Surveys · doi:10.1145/3203245 · Cited by 535 · see citing works
Network Topology and Communication-Computation Tradeoffs in Decentralized Optimization
Nedić, A., Olshevsky, A., & Rabbat, M. (2018) · Proceedings of the IEEE · doi:10.1109/jproc.2018.2817461 · Cited by 530 · see citing works
A Survey on Model-Based Distributed Control and Filtering for Industrial Cyber-Physical Systems
Ding, D., Han, Q., Wang, Z., & Ge, X. (2019) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2019.2905295 · Cited by 511 · see citing works
Smart Agents in Industrial Cyber–Physical Systems
Leitão, P., Karnouskos, S., Ribeiro, L., Lee, J., Strasser, T., & Colombo, A. W. (2016) · Proceedings of the IEEE · doi:10.1109/jproc.2016.2521931 · Cited by 467 · see citing works
Potyrailo, R. A. (2016) · Chemical Reviews · doi:10.1021/acs.chemrev.6b00187 · Cited by 461 · see citing works
Mulligan, G. (2007) · doi:10.1145/1278972.1278992 · Cited by 438 · see citing works
Li, X., Niu, J., Bhuiyan, M. Z. A., Wu, F., Karuppiah, M., & Kumari, S. (2017) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2017.2773666 · Cited by 415 · see citing works
Industrial Cyberphysical Systems: A Backbone of the Fourth Industrial Revolution
Colombo, A. W., Karnouskos, S., Kaynak, O., Shi, Y., & Yin, S. (2017) · IEEE Industrial Electronics Magazine · doi:10.1109/mie.2017.2648857 · Cited by 401 · see citing works
The Cybersecurity Landscape in Industrial Control Systems
McLaughlin, S., Konstantinou, C., Wang, X., Davi, L., Sadeghi, A.-R., Maniatakos, M., & Karri, R. (2016) · Proceedings of the IEEE · doi:10.1109/jproc.2015.2512235 · Cited by 391 · see citing works
Real-Time Wireless Sensor-Actuator Networks for Industrial Cyber-Physical Systems
Lu, C., Saifullah, A., Li, B., Sha, M., González, H., Gunatilaka, D., Wu, C., Nie, L., & Chen, Y. (2015) · Proceedings of the IEEE · doi:10.1109/jproc.2015.2497161 · Cited by 391 · see citing works
Review of security issues in industrial networks
Cheminod, M., Durante, L., & Valenzano, A. (2013) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2012.2198666 · Cited by 349 · cited 2× · see citing works
“The technical review of control engineering tools is presented in [78] while review of the key enabling technologies and major applications of ICPSs can be found in [112].”
BackgroundA survey of cyber security management in industrial control systems
Knowles, W., Prince, D., Hutchison, D., Disso, J. F. P., & Jones, K. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.02.002 · Cited by 344 · see citing works
A Lightweight Authentication Mechanism for M2M Communications in Industrial IoT Environment
Esfahani, A., Μαντάς, Γ., Matischek, R., Saghezchi, F. B., Rodrı́guez, J., Bicaku, A., Maksuti, S., Tauber, M., Schmittner, C., & Bastos, J. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2737630 · Cited by 340 · see citing works
WirelessHART Versus ISA100.11a: The Format War Hits the Factory Floor
Petersen, S., & Carlsen, S. (2011) · IEEE Industrial Electronics Magazine · doi:10.1109/mie.2011.943023 · Cited by 336 · see citing works
A common language for computer security incidents
Howard, J. D., & Longstaff, T. A. (1998) · doi:10.2172/751004 · Cited by 334 · see citing works
IP is dead, long live IP for wireless sensor networks
Hui, J. W., & Culler, D. (2008) · ACM Conference on Embedded Networked Sensor Systems (SenSys) · doi:10.1145/1460412.1460415 · Cited by 312 · see citing works
Fieldbus Technology in Industrial Automation
Thomesse, J. P. (2005) · Proceedings of the IEEE · doi:10.1109/jproc.2005.849724 · Cited by 295 · see citing works
Security and privacy in cyber-physical systems: A survey of surveys
Giraldo, J., Sarkar, E., Cardenas, A. A., Maniatakos, M., & Kantarcioglu, M. (2017) · IEEE Design & Test · doi:10.1109/mdat.2017.2709310 · Cited by 289 · see citing works
Effect of the Fukushima nuclear disaster on global public acceptance of nuclear energy
Kim, Y.-H., Kim, M., & Kim, W. (2013) · Energy Policy · doi:10.1016/j.enpol.2013.06.107 · Cited by 289 · see citing works
Dynamic Watermarking: Active Defense of Networked Cyber–Physical Systems
Satchidanandan, B., & Kumar, P. R. (2016) · Proceedings of the IEEE · doi:10.1109/jproc.2016.2575064 · Cited by 282 · see citing works
Cyber ranges and security testbeds: Scenarios, functions, tools and architecture
Yamin, M. M., Katt, B., & Gkioulos, V. (2019) · Computers & Security · doi:10.1016/j.cose.2019.101636 · Cited by 273 · see citing works
Framework for cyber-physical systems: volume 1, overview
Griffor, E., Greer, C. L., Wollman, D. A., et al. (2017) · doi:10.6028/nist.sp.1500-201 · Cited by 248 · see citing works
Ho, G., Leung, D., Mishra, P., et al. (2016) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/2897845.2897886 · Cited by 238 · see citing works
Das, A. K., Wazid, M., Kumar, N., Vasilakos, A. V., & Rodrigues, J. J. P. C. (2018) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2877690 · Cited by 234 · see citing works
Security-Aware Industrial Wireless Sensor Network Deployment Optimization
Cao, B., Zhao, J., Gu, Y., Fan, S., & Yang, P. (2019) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2019.2961340 · Cited by 224 · see citing works
Cyber Physical System (CPS)-Based Industry 4.0: A Survey
Lu, Y. (2017) · Journal of Industrial Integration and Management · doi:10.1142/s2424862217500142 · Cited by 214 · see citing works
Younan, M., Houssein, E. H., Elhoseny, M., & Ali, A. A. (2019) · Measurement · doi:10.1016/j.measurement.2019.107198 · Cited by 207 · see citing works
Industrial Internet of Things: A Systematic Literature Review and Insights
Liao, Y., Loures, E. D. F. R., & Deschamps, F. (2018) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2834151 · Cited by 203 · see citing works
A Taxonomy of Attacks on the DNP3 Protocol
East, S., Butts, J. W., Papa, M., & Shenoi, S. (2009) · IFIP advances in information and communication technology · doi:10.1007/978-3-642-04798-5_5 · Cited by 192 · see citing works
Aviation Cyber–Physical Systems: Foundations for Future Aircraft and Air Transport
Sampigethaya, K., & Poovendran, R. (2013) · Proceedings of the IEEE · doi:10.1109/jproc.2012.2235131 · Cited by 190 · see citing works
Verizon: Data Breach Investigations Report 2020
(2020) · Computer Fraud & Security · doi:10.1016/s1361-3723(20)30059-2 · Cited by 189 · see citing works
Cloud-assisted industrial cyber-physical systems: An insight
Yue, X., Cai, H., Yan, H., Zou, C., & Zhou, K. (2015) · Microprocessors and Microsystems · doi:10.1016/j.micpro.2015.08.013 · Cited by 186 · see citing works
Industrial Internet of Things Driven by SDN Platform for Smart Grid Resiliency
Al–Rubaye, S., Hamza, E. K., Ni, Q., & Anpalagan, A. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2734903 · Cited by 183 · see citing works
Bluetooth Low Energy Mesh Networks: A Survey
Darroudi, S. M., & Gómez, C. (2017) · Sensors · doi:10.3390/s17071467 · Cited by 173 · see citing works
Stuxnet, the real start of cyber warfare? [Editor's Note]
Chen, T. (2010) · IEEE Network · doi:10.1109/mnet.2010.5634434 · Cited by 168 · see citing works
The Cyber Attack on Saudi Aramco
Bronk, C., & Tikk-Ringas, E. (2013) · Survival · doi:10.1080/00396338.2013.784468 · Cited by 160 · cited 2× · see citing works
“Saudi Aramco Attack [21] .”
BackgroundRamotsoela, D. T., Abu-Mahfouz, A. M. I., & Hancke, G. P. (2018) · Sensors · doi:10.3390/s18082491 · Cited by 158 · see citing works
Wireless sensors networks for Internet of Things
Khalil, N., Abid, M. R., Benhaddou, D., & Gerndt, M. (2014) · International Conference on Intelligent Sensors, Sensor Networks and Information Processing · doi:10.1109/issnip.2014.6827681 · Cited by 157 · see citing works
Assessing the Physical Impact of Cyberattacks on Industrial Cyber-Physical Systems
Huang, K., Zhou, C., Tian, Y., Yang, S., & Qin, Y. (2018) · IEEE Transactions on Industrial Electronics · doi:10.1109/tie.2018.2798605 · Cited by 143 · see citing works
Cyber-physical systems for water sustainability: challenges and opportunities
Wang, Z., Song, H. H., Watkins, D., Ong, K. G., Xue, P., Yang, Q. B., & Shi, X. (2015) · IEEE Communications Magazine · doi:10.1109/mcom.2015.7105668 · Cited by 142 · see citing works
Qian, B., Su, J., Wen, Z., Jha, D. N., Li, Y., Guan, Y., Puthal, D., James, P., Yang, R., Zomaya, A. Y., et al. (2021) · ACM Computing Surveys · doi:10.1145/3398020 · Cited by 132 · see citing works
Self-citationTaxonomy for description of cross-domain attacks on CPS
Yampolskiy, M., Horvath, P., Koutsoukos, X., Xue, Y., & Sztipanovits, J. (2013) · doi:10.1145/2461446.2461465 · Cited by 128 · see citing works
AVOIDIT: A Cyber Attack Taxonomy
Simmons, C., Ellis, C. D., Shiva, S. G., Dasgupta, D., & Wu, Q. (2009) · Cited by 124 · see citing works
An improved cyber-physical systems architecture for Industry 4.0 smart factories
Jiang, J. (2018) · Advances in Mechanical Engineering · doi:10.1177/1687814018784192 · Cited by 122 · see citing works
Chen, R. (2016) · Food Control · doi:10.1016/j.foodcont.2016.06.042 · Cited by 116 · see citing works
Limits of increasing the performance of Industrial Ethernet protocols
Jasperneite, J., Schumacher, M., & Weber, K. (2007) · IEEE Conference on Emerging Technologies & Factory Automation (ETFA) · doi:10.1109/efta.2007.4416748 · Cited by 110 · see citing works
A Survey of Industrial Control System Testbeds
Holm, H., Karresand, M., Vidström, A., & Westring, E. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-26502-5_2 · Cited by 104 · see citing works
Ensemble-learning Approaches for Network Security and Anomaly Detection
Vanerio, J., & Casas, P. (2017) · doi:10.1145/3098593.3098594 · Cited by 104 · see citing works
Ren, Y., Zhu, F., Qi, J. X., Wang, J., & Sangaiah, A. K. (2019) · Applied Sciences · doi:10.3390/app9102058 · Cited by 104 · see citing works
Survey and systematic mapping of industrial Wireless Sensor Networks
Queiroz, D. V., de Alencar, M. S., Gomes, R. D., da Fonseca, I. E., & Benavente-Peces, C. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.08.019 · Cited by 97 · see citing works
A REST-based industrial web of things’ framework for smart warehousing
Jabbar, S., Khan, M., Silva, B. N., et al. (2016) · The Journal of Supercomputing · doi:10.1007/s11227-016-1937-y · Cited by 95 · see citing works
High-Performance Unsupervised Anomaly Detection for Cyber-Physical System Networks
Schneider, P., & Böttinger, K. (2018) · doi:10.1145/3264888.3264890 · Cited by 95 · see citing works
A cyber-physical systems approach to energy management in data centers
Parolini, L., Tolia, N., Sinopoli, B., et al. (2010) · ACM/IEEE International Conference on Cyber-Physical Systems (ICCPS) · doi:10.1145/1795194.1795218 · Cited by 94 · see citing works
Decentralized, BlockChain Based Access Control Framework for the Heterogeneous Internet of Things
Dukkipati, C., Zhang, Y., & Cheng, L. C. (2018) · doi:10.1145/3180457.3180458 · Cited by 93 · see citing works
Taxonomy of attacks on industrial control protocols
Drias, Z., Serhrouchni, A., & Vogel, O. (2015) · International Conference on Protocol Engineering and International Conference on New Technologies of Distributed Systems (ICPE-NTDS) · doi:10.1109/notere.2015.7293513 · Cited by 86 · see citing works
A Modbus/TCP Fuzzer for testing internetworked industrial systems
Voyiatzis, A. G., Katsigiannis, K., & Koubias, S. (2015) · IEEE Conference on Emerging Technologies & Factory Automation (ETFA) · doi:10.1109/etfa.2015.7301400 · Cited by 85 · see citing works
Srinidhi, B. N., Yan, J., & Tayi, G. K. (2015) · Decision Support Systems · doi:10.1016/j.dss.2015.04.011 · Cited by 84 · see citing works
OpenPLC: An IEC 61,131–3 compliant open source industrial controller for cyber security research
Alves, T., & Morris, T. H. (2018) · Computers & Security · doi:10.1016/j.cose.2018.07.007 · Cited by 84 · see citing works
Game-Theory-Based Active Defense for Intrusion Detection in Cyber-Physical Embedded Systems
Wang, K., Du, M., Yang, D., Zhu, C., Shen, J., & Zhang, Y. (2016) · ACM Transactions on Embedded Computing Systems · doi:10.1145/2886100 · Cited by 82 · see citing works
On the Use of Emulab Testbeds for Scientifically Rigorous Experiments
Siaterlis, C., Garcia, A. P., & Genge, B. (2012) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2012.0601112.00185 · Cited by 80 · see citing works
Effect of Imbalanced Datasets on Security of Industrial IoT Using Machine Learning
Zolanvari, M., Teixeira, M. A., & Jain, R. K. (2018) · IEEE International Conference on Intelligence and Security Informatics (ISI) · doi:10.1109/isi.2018.8587389 · Cited by 77 · see citing works
Hai, T., Bhuiyan, M. Z. A., Rahman, M. A., et al. (2019) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2019.2950192 · Cited by 74 · see citing works
Multimodal Human Activity Recognition for Industrial Manufacturing Processes in Robotic Workcells
Roitberg, A., Somani, N., Perzylo, A., et al. (2015) · ACM International Conference on Multimodal Interaction (ICMI) · doi:10.1145/2818346.2820738 · Cited by 72 · see citing works
A cyber-physical attack taxonomy for production systems: a quality control perspective
Elhabashy, A. E., Wells, L. J., Camelio, J. A., et al. (2018) · Journal of Intelligent Manufacturing · doi:10.1007/s10845-018-1408-9 · Cited by 72 · see citing works
A Survey on Bluetooth 5.0 and Mesh
Yin, J., Yang, Z., Cao, H., Liu, T., Zhou, Z., & Wu, C. (2019) · ACM Transactions on Sensor Networks · doi:10.1145/3317687 · Cited by 72 · see citing works
Cyber-physical systems in industrial process control
Wang, Y., Vuran, M. C., & Goddard, S. (2008) · ACM SIGBED Review · doi:10.1145/1366283.1366295 · Cited by 69 · see citing works
Hassan, M. M., Huda, S., Sharmeen, S., Abawajy, J., & Fortino, G. (2020) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2020.3015026 · Cited by 68 · see citing works
Cyber attack taxonomy for digital environment in nuclear power plants
Kim, S., Heo, G., Zio, E., Shin, J., & Song, J.-G. (2019) · Nuclear Engineering and Technology · doi:10.1016/j.net.2019.11.001 · Cited by 59 · see citing works
Synthetic datasets generation for intrusion detection in VANET
Belenko, V., Krundyshev, V., & Kalinin, M. (2018) · International Conference on Security of Information and Networks (SIN) · doi:10.1145/3264437.3264479 · Cited by 58 · see citing works
Real-time continuous iris recognition for authentication using an eye tracker
Mock, K. J., Hoanca, B., Weaver, J., & Milton, M. (2012) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/2382196.2382307 · Cited by 57 · see citing works
Human localization based on inertial sensors and fingerprints in the Industrial Internet of Things
Lin, K., Wang, W., Bi, Y., et al. (2015) · Computer Networks · doi:10.1016/j.comnet.2015.11.012 · Cited by 56 · see citing works
Migration of industrial process control systems into service oriented architecture
Delsing, J., Rosenqvist, F., Carlsson, O., et al. (2012) · Proceedings of the Annual Conference of the IEEE Industrial Electronics Society · doi:10.1109/iecon.2012.6389039 · Cited by 54 · see citing works
Cybercrimes: A Proposed Taxonomy and Challenges
Brar, H. S., & Kumar, G. (2018) · Journal of Computer Networks and Communications · doi:10.1155/2018/1798659 · Cited by 54 · see citing works
Alcaraz, C., Román, R., Najera, P., & López, J. (2012) · Ad Hoc Networks · doi:10.1016/j.adhoc.2012.12.001 · Cited by 52 · see citing works
Operational Technology and Information Technology in Industrial Control Systems
Hahn, A. (2016) · Advances in information security · doi:10.1007/978-3-319-32125-7_4 · Cited by 51 · see citing works
Enabling PROFINET devices to work in IoT: Characterization and requirements
Bellagente, P., Ferrari, P., Flammini, A., et al. (2016) · IEEE International Instrumentation and Measurement Technology Conference · doi:10.1109/i2mtc.2016.7520417 · Cited by 50 · see citing works
EtherCAT Tutorial: An Introduction for Real-Time Hardware Communication on Windows [Tutorial]
Langlois, K. P., van der Hoeven, T., Rodriguez-Cianca, D., et al. (2018) · IEEE Robotics & Automation Magazine · doi:10.1109/mra.2017.2787224 · Cited by 50 · see citing works
Attacks on the Industrial Internet of Things – Development of a multi-layer Taxonomy
Berger, S., Bürger, O., & Röglinger, M. (2020) · Computers & Security · doi:10.1016/j.cose.2020.101790 · Cited by 47 · see citing works
Curiac, D.-I. (2016) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2016.01.013 · Cited by 46 · see citing works
Application of Wireless Technology for Control: A WirelessHART Perspective
Hassan, S. M., Ibrahim, R., Bingi, K., et al. (2017) · Procedia Computer Science · doi:10.1016/j.procs.2017.01.217 · Cited by 46 · see citing works
From old to new: Assessing cybersecurity risks for an evolving smart grid
Langer, L., Skopik, F., Smith, P., et al. (2016) · Computers & Security · doi:10.1016/j.cose.2016.07.008 · Cited by 44 · see citing works
Cybercriminals, cyberattacks and cybercrime
Sabillón, R., Cavaller, V., M., J. J. C., et al. (2016) · doi:10.1109/icccf.2016.7740434 · Cited by 44 · see citing works
Taxonomy of Attacks for Agent-Based Smart Grids
Hu, J., Pota, H. R., & Guo, S. (2014) · IEEE Transactions on Parallel and Distributed Systems · doi:10.1109/tpds.2013.301 · Cited by 43 · see citing works
Núñez, J. C. S., Lindo, A. C., Ávila, M., & Bravo, A. (2020) · Future Generation Computer Systems · doi:10.1016/j.future.2020.07.015 · Cited by 42 · see citing works
Taxonomy of Cross-Domain Attacks on CyberManufacturing System
Wu, M., & Moon, Y. B. (2017) · Procedia Computer Science · doi:10.1016/j.procs.2017.09.050 · Cited by 40 · see citing works
Industrial cyber physical systems: A survey for control-engineering tools
Jbair, M., Ahmad, B., Ahmad, M. H., & Harrison, R. (2018) · IEEE International Conference on Industrial Cyber-Physical Systems (ICPS) · doi:10.1109/icphys.2018.8387671 · Cited by 38 · see citing works
Towards a taxonomy of cyber threats against target applications
Narwal, B., Mohapatra, A. K., & Usmani, K. A. (2019) · Journal of Statistics and Management Systems · doi:10.1080/09720510.2019.1580907 · Cited by 37 · see citing works
A Trust Computing-based Security Routing Scheme for Cyber Physical Systems
Liu, Y., Liu, X., Liu, A., et al. (2019) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3321694 · Cited by 37 · see citing works
Biometrics Authentication Technique for Intrusion Detection Systems Using Fingerprint Recognition
Mudholkar, S. S. (2012) · International Journal of Computer Science Engineering and Information Technology · doi:10.5121/ijcseit.2012.2106 · Cited by 35 · see citing works
Yin, Y., Xie, L., Gu, T., Lu, Y., & Lu, S. (2019) · ACM Transactions on Sensor Networks · doi:10.1145/3343855 · Cited by 33 · see citing works
Demchenko, Y., Ngo, C., de Laat, C., et al. (2014) · IEEE International Conference on Cloud Engineering · doi:10.1109/ic2e.2014.84 · Cited by 32 · see citing works
Optimal sensor deployment to increase the security of the maximal breach path in border surveillance
Karabulut, E., Aras, N., & Altınel, İ. K. (2016) · European Journal of Operational Research · doi:10.1016/j.ejor.2016.09.016 · Cited by 32 · see citing works
Towards a Cyber Conflict Taxonomy
Applegate, S., & Stavrou, A. (2013) · International Conference on Cyber Conflict · Cited by 31 · see citing works
Ling, S. H., Chan, K. Y., Leung, F. H. F., et al. (2015) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2015.03.003 · Cited by 30 · see citing works
Smeraldi, F., & Malacaria, P. (2014) · doi:10.1145/2602945.2602952 · Cited by 29 · see citing works
An EtherCAT-Based Real-Time Control System Architecture for Humanoid Robots
Sygulla, F., Wittmann, R., Seiwald, P., et al. (2018) · 2022 IEEE 18th International Conference on Automation Science and Engineering (CASE) · doi:10.1109/coase.2018.8560532 · Cited by 28 · see citing works
Teaching Case Security Breach at Target
Plachkinova, M., & Maurer, C. (2018) · The Journal of Information and Systems in Education · Cited by 28 · see citing works
Industrial Cybersecurity: Improving Security Through Access Control Policy Models
Valenzano, A. (2014) · IEEE Industrial Electronics Magazine · doi:10.1109/mie.2014.2311313 · Cited by 27 · see citing works
Taxonomy of cyber attacks and simulation of their effects
Chapman, I. M., Leblanc, S. P., & Partington, A. (2011) · Annual Simulation Symposium (ANSS) · doi:10.5555/2048558.2048569 · Cited by 26 · see citing works
Shah, G., & Tiwari, A. (2018) · doi:10.1145/3152494.3156816 · Cited by 26 · see citing works
Dynamic Awareness of an Industrial Robotic Arm Using Time-of-Flight Laser-Ranging Sensors
Kumar, S., Savur, C., & Sahin, F. (2018) · Conference proceedings/Conference proceedings - IEEE International Conference on Systems, Man, and Cybernetics · doi:10.1109/smc.2018.00485 · Cited by 26 · see citing works
Implementation of Industrial Cyber Physical System: Challenges and Solutions
Yu, W., Dillon, T. S., Mostafa, F., et al. (2019) · IEEE International Conference on Industrial Cyber-Physical Systems (ICPS) · doi:10.1109/icphys.2019.8780271 · Cited by 26 · see citing works
Stouffer, K. A., Falco, J., & Scarfone, K. A. (2013) · doi:10.6028/nist.sp.800-82r1 · Cited by 26 · see citing works
EtherCAT network latency analysis
Nguyen, V. Q., & Jeon, J. W. (2016) · International Conference on Computing, Communication and Automation · doi:10.1109/ccaa.2016.7813815 · Cited by 25 · see citing works
Plachkinova, M., & Maurer, C. (2018) · Journal of the Association for Information Systems · Cited by 24 · see citing works
The next generation operational data historian for IoT based on informix
Huang, S., Chen, Y., Chen, X., et al. (2014) · Proceedings - ACM-SIGMOD International Conference on Management of Data · doi:10.1145/2588555.2595638 · Cited by 22 · see citing works
An EtherCAT-based real-time motion control system in mobile robot application
Delgado, R., Kim, S., You, B.-J., et al. (2016) · International Conference on Ubiquitous Robots and Ambient Intelligence · doi:10.1109/urai.2016.7734098 · Cited by 22 · see citing works
Zigbee-based remote environmental monitoring for smart industrial mining
Chehri, A., & Saadane, R. (2019) · International Conference on Smart City Applications (SCA) · doi:10.1145/3368756.3369099 · Cited by 20 · see citing works
Hypergames and Cyber-Physical Security for Control Systems
Bakker, C., Bhattacharya, A., Chatterjee, S., et al. (2020) · ACM Transactions on Cyber-Physical Systems · doi:10.1145/3384676 · Cited by 18 · see citing works
Optimal Level and Allocation of Cybersecurity Spending: Model and FormulaPreprint
Wang, S. S. (2017) · SSRN Electronic Journal · doi:10.2139/ssrn.3010029 · Cited by 17 · see citing works
Remote monitoring of water level in industrial storage tanks using NB-IoT
Anand, S., & Regi, R. (2018) · International Conference on Communication Information and Computing Technology (ICCICT) · doi:10.1109/iccict.2018.8325871 · Cited by 17 · see citing works
Analyzing the Effectiveness of Attack Countermeasures in a SCADA System
Korman, M., Välja, M., Björkman, G., et al. (2017) · doi:10.1145/3055386.3055393 · Cited by 16 · see citing works
Guest Editorial: Security, Privacy, and Trust for Industrial Internet of Things
Gidlund, M., Hancke, G. P. J., Eldefrawy, M., et al. (2020) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2019.2953241 · Cited by 16 · see citing works
A taxonomy of cyber attack and defence mechanisms for emergency management networks
Loukas, G., Gan, D., & Vuong, T. P. (2013) · IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops) · doi:10.1109/percomw.2013.6529554 · Cited by 14 · see citing works
Defining the Industrial Demilitarized Zone and Its Benefits for Mining Applications
Mazur, D. C., Entzminger, R. A., Morell, P. A., Kay, J., & Syme, E. (2016) · IEEE Transactions on Industry Applications · doi:10.1109/tia.2016.2530045 · Cited by 10 · see citing works
Cyber-Physical Systems: The Next Generation of Evolvable Hardware Research and Applications
Greenwood, G. W., Gallagher, J. C., & Matson, E. T. (2014) · Proceedings in adaptation, learning and optimization · doi:10.1007/978-3-319-13359-1_23 · Cited by 8 · see citing works
Cyber security password policy for industrial control networks
Sarkar, S., Sarkar, S., Sarkar, K., et al. (2015) · International Conference on Next Generation Computing Technologies · doi:10.1109/ngct.2015.7375151 · Cited by 8 · see citing works
Protecting industrial control systems
Kirkpatrick, K. (2019) · Communications of the ACM · doi:10.1145/3355377 · Cited by 7 · see citing works
Using RBAC to Enforce the Principle of Least Privilege in Industrial Remote Maintenance Sessions
Kern, A., & Anderl, R. (2018) · International Conference on Internet of Things: Systems, Management and Security (IOTSMS) · doi:10.1109/iotsms.2018.8554805 · Cited by 5 · see citing works
Siddique, W. A. (2020) · Indian Journal of Science and Technology · doi:10.17485/ijst/2020/v13i02/148768 · Cited by 5 · see citing works
Optimizing solar systems using DeviceNET
Serhane, A., Shraif, M., Chehadi, H., et al. (2017) · doi:10.1109/icm.2017.8268884 · Cited by 4 · see citing works
Performance Research on Industrial Demilitarized Zone in Defense-in-Depth Architecture
Jiang, N., Lin, H., Yin, Z., & Zheng, L. (2018) · 2018 IEEE International Conference on Information and Automation (ICIA) · doi:10.1109/icinfa.2018.8812486 · Cited by 4 · see citing works
Use of an SDN Switch in Support of NIST ICS Security Recommendations and Least Privilege Networking
Venugopal, V., Alves-Foss, J., & Ravindrababu, S. G. (2019) · doi:10.1145/3372318.3372321 · Cited by 4 · see citing works
Delay Analysis of ControlNet and DeviceNet in Distributed Control System
Azad, S. M. A. K., & Srinivasan, K. (2016) · Advances in intelligent systems and computing · doi:10.1007/978-981-10-1645-5_52 · Cited by 1 · see citing works
Flagged first, then by citations
Research works printed but not linked: 6
- [22]Steven T. Bushby and H. Michael Newman. 2002. BACnet Today. ASHRAE Journal 10 (2002), 10–18.
- [97]Robert M. Lee, Michael J. Assante, and Tim Conway. 2014. German Steel Mill Cyber Attack. Ind. Control Syst. 30 (2014), 62.
- [104]Zhihong Lin and Stephanie Pearson. 2013. An inside look at industrial Ethernet communication protocols. Technical Report. Texas Instruments.
- IEEE Ind. Electronics Mag. 5, 4 (2011), 23–34.
- [139]Ragunathan (Raj) Rajkumar, Insup Lee, Lui Sha, and John Stankovic. 2010. Cyber-Physical Systems: The Next Computing Revolution. In Design Automation Conference. IEEE, Anaheim, California, 731–736.
- [165]Ted Thornhill. 2014. San Francisco Pranksters Hack Road Sign to Warn Drivers of Godzilla Attack. Retrieved August 21, 2020 from https://www.dailymail.co.uk/news/article-2632556/Godzilla-Attack-Turn-Pranksters-hack-San-Francisco-road-sign-warn-drivers-just-movie-makes-monster-93-2million-box-office.html [166] unstats.un.org. 2020. UNSD — ISIC. Retrieved August 29, 2020 from https://unstats.un.org/unsd/classifications/Econ/ ISIC.cshtml#:~:text=The%20International%20Standard%20Industrial%20Classification,statistics%20according%20to% 20such%20activities. , Vol. 1, No. 1, Article . Publication date: February 2022. Cybersecurity of Industrial Cyber-Physical Systems: A Review 35 [167] us cert.cisa.gov. 2013. ICS-CERT MONITOR. Retrieved August 01, 2020 from https://us-cert.cisa.gov/sites/default/ files/Monitors/ICS-CERT_Monitor_Apr-Jun2013.pdf [168] us cert.cisa.gov. 2015. NCCIC/ICS-CERT Industrial Control Systems Assessment Summary Report. , 25 pages. Retrieved August 26, 2020 from https://us-cert.cisa.gov/sites/default/files/Annual_Reports/FY2015_Industrial_Control_Systems_ Assessment_Summary_Report_S508C.pdf [169] us cert.cisa.gov. 2016. ICS-CERT Annual Assessment Report FY2016. , 24 pages.
Cited by
Sorted by citations
A Systematic Review of Data Quality in CPS and IoT for Industry 4.0
Goknil, A., Nguyen, P., Sen, S., Politaki, D., Niavis, H., Pedersen, K. J., Suyuthi, A., Anand, A., & Ziegenbein, A. (2023) · ACM Computing Surveys · doi:10.1145/3593043 · Cited by 68 · see citing works
Eyeleko, A. H., & Feng, T. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3308195 · Cited by 38 · see citing works
“In this scenario, the exploited vulnerability is Poor Hardening and the launched attacks are Physical Damage [42] and Tampering [43], with the target being the PLC. Scenario − 2: Prime MotorX is equipped with thermocouples to maintain precise and consistent temperature conditions during various…”
BackgroundA novel anomaly detection approach based on ensemble semi-supervised active learning (ADESSA)
Niu, Z., Guo, W., Xue, J., Wang, Y., Kong, Z., & Huang, L. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103190 · Cited by 27 · see citing works
Hong, A. E., Malinovsky, P. P., & Damodaran, S. K. (2024) · Digital Threats: Research and Practice · doi:10.1145/3604434 · Cited by 11 · see citing works
Abraham, D., Erceylan, G., Gkioulos, V., & Houmb, S. H. (2025) · International Journal of Information Security · doi:10.1007/s10207-025-01158-1 · Cited by 10 · see citing works
A Robust Architecture for High-Availability Authentication in OT/ICS Environments
Mahansaria, D., Gauravaram, P., Pati, D. P., & Misra, P. (2026) · Proceedings of the 6th ACM Workshop on Secure and Trustworthy Cyber-Physical Systems · doi:10.1145/3806008.3811699
Mohamed, A. S., Fritz, C., Saber, A. M., Ma, Y., Kaur, R., Al-Darwbi, M., Friedrich, D., & Kundur, D. (2026) · arXiv · doi:10.48550/arxiv.2609.00171
“This complex industrial landscape is undergoing a rapid transformation driven by Industry 4.0 initiatives, increasing connectivity, and growing IT/OT convergence [3]–[6].”
Influential
- Authors
- Kayan, H., Nunes, M., Rana, O., Burnap, P., & Perera, C.
- Affiliations
- Cardiff University (GB)
- Venue
- ACM Computing Surveys
- Published
- 2022-01-31
- Volume
- 54
- Issue
- 11s
- Pages
- 1-35
- ISSN
- 0360-0300 (ISSN-L)
- 1557-7341
- OpenAlex
- W3119687955
- Cited by
- 261
- References
- 152
- Citations by year
- 2026: 71 · 2025: 79 · 2024: 55 · 2023: 38 · 2022: 15 · 2021: 3
- FWCI
- 20.73
- Type
- journal article
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- ACM Computing Surveys (publishedVersion)
- ORCA Online Research @Cardiff (Cardiff University) (acceptedVersion)
- arXiv (Cornell University) (submittedVersion)
- ORCA Online Research @Cardiff (Cardiff University) (submittedVersion)
- arXiv (Cornell University)
- Funders
- EPSRC PETRAS (EP/S035362/1)
- GCHQ National Resilience Fellowship
- Republic of Turkey Ministry of National Education
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- industrial cyber-physical systems, industrial cybersecurity, critical infrastructure, attack surface, vulnerability assessment, cyber incidents, intrusion detection systems, network traffic analysis, anomaly detection, security policy, boundary protection
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
