Assurance techniques for industrial control systems (ICS)

CPS-SPC 2015 - Proceedings of the 1st ACM Workshop on Cyber-Physical Systems-Security and/or Privacy, co-located with CCS 2015

Volumn , Issue , 2015, Pages 101-112

  Knowles, William ^a   Such, Jose M ^a   Gouglidis, Antonios ^a   Misra, Gaurav ^a   Rashid, Awais ^a  

^a LANCASTER UNIVERSITY   (United Kingdom)

Author keywords

Assurance techniques; ICS; Risk management; SCADA

Indexed keywords

EMBEDDED SYSTEMS; INTEGRATED CIRCUITS; LIFE CYCLE; RISK MANAGEMENT;

ASSURANCE TECHNIQUES; INDUSTRIAL CONTROL SYSTEMS; OPERATIONAL PHASE; SCADA; SECURITY ASSESSMENT; SECURITY CONTROLS; SECURITY PRACTITIONERS; SYSTEM DEVELOPMENT LIFE CYCLES;

INTELLIGENT CONTROL;

EID: 84964880630     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2808705.2808710     Document Type: Conference Paper

References (18)

1. CPNI. Commercially Available Penetration Testing: Best Practice Guide. Technical report, 2006.
2. N. Davis. Secure Software Development Life Cycle Processes. Technical report, Software Engineering Institute, 2013.
3. P. Didier. Converged Plantwide Ethernet (CPwE ) Design and Implementation Guide. Cisco Systems and Rockwell Automation, 2011.
4. ENISA. Protecting Industrial Control Systems: Annex II. Survey and Interview Analysis. Technical report, 2011.
5. European Network and Information Security Agency (ENISA). Survey and interview analysis. For the Report :Good practices for an EU ICS testingcoordination capability. Technical report, 2013.
6. D. Jackson and D. Cooper. Where do Software Security Assurance Tools Add Value. In Workshop on Software Security Assurance Tools, Techniques, and Metrics. SSATTM05, pages 14-21, 2005.
7. W. Knowles, A. Baron, and T. McGarr. Analysis and recommendations for standardization in penetration testing and vulnerability assessment: Penetration testing market survey. Technical report, British Standards Institution (BSI), 2015.
8. W. Knowles, D. Prince, D. Hutchison, J. Pagna Disso, and K. Jones. A survey of cyber security management in industrial control systems. International Journal of Critical Infrastructure Protection, 9:52-80, 2015.
9. NERC. Standard CIP-007-3 - Cyber Security - Systems Security Management. Technical report, 2013.
10. NIST. Special Publication 800-53 Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations. Technical report, 2013.
11. PCI Security Standards Council. Payment Card Industry (PCI) Data Security Standard: Requirements and Security Assessment Procedures (Version 3.0). Technical report, 2013.
12. SANS. Breaches on the Rise in Control Systems: A SANS Survey. Technical report, 2014.
13. J. Searle. NESCOR Guide to Penetration Testing for Electric Utilities. Technical report.
14. J. M. Such, A. Gouglidis, W. Knowles, G. Misra, and A. Rashid. The Economics of Assurance Activities. Technical Report SCC-2015-03, Security Lancaster, Lancaster University, 2015.
15. UK HM Government. Cyber Essentials Scheme: Summary. Technical report, 2014.
16. U.S. Department of Homeland Security. Cyber Security Procurement Language for Control Systems. Technical Report September, 2009.
17. U.S. Department of Homeland Security. Cyber Security Assessments of Industrial Control Systems. Technical Report April, 2011.
18. D. Washington Navy Yard and B. A. Hamilton. Software security assessment tools review. Mar, 2:145, 2009.