Cloud-Assisted IoT-Based SCADA Systems Security: A Review of the State of the Art and Future Challenges

IEEE Access

Volumn 4, Issue , 2016, Pages 1375-1384

  Sajid, Anam ^a   Abbas, Haider ^b,c   Saleem, Kashif ^c  

^a SHAHEED ZULFIKAR ALI BHUTTO INSTITUTE OF SCIENCE AND TECHNOLOGY   (Pakistan)

^b NATIONAL UNIVERSITY OF SCIENCES AND TECHNOLOGY   (Pakistan)

^c KING SAUD UNIVERSITY   (Saudi Arabia)

Author keywords

APT; Industrial Control System; Internet of Things (IoT); NIST; PRECYSE; SOA; Supervisory Control and Data Acquisition

Indexed keywords

BIOMEDICAL ENGINEERING; CLOUD COMPUTING; COMPLEX NETWORKS; COMPUTER SUPPORTED COOPERATIVE WORK; DATA ACQUISITION; DISTRIBUTED COMPUTER SYSTEMS; EMBEDDED SYSTEMS; FAULT TOLERANCE; INTEGRATION; INTERNET; INTERNET OF THINGS; PATIENT MONITORING; WIRELESS SENSOR NETWORKS;

INDUSTRIAL CONTROL SYSTEMS; INTERNET OF THINGS (IOT); NIST; PRECYSE; SUPERVISORY CONTROL AND DATA ACQUISITION;

SCADA SYSTEMS;

EID: 84979815252     PISSN: None     EISSN: 21693536     Source Type: Journal    
DOI: 10.1109/ACCESS.2016.2549047     Document Type: Review

References (43)

1. T. Lojka and I. Zolotová, "Improvement of human-plant interactivity via industrial cloud-based supervisory control and data acquisition system," Advances in Production Management Systems. Innovative and Knowledge-Based Production Management in a Global-Local World (IFIP Advances in Information and Communication Technology). Berlin, Germany: Springer, 2014, pp. 83-90.
2. C.-R. Rad, O. Hancu, I.-A. Takacs, and G. Olteanu, "Smart monitoring of potato crop: A cyber-physical system architecture model in the field of precision agriculture," Agricult. Agricult. Sci. Procedia, vol. 6, pp. 73-79, Sep. 2015, doi: 10.1016/j.aaspro.2015.08.041.
3. G. Fortino, A. Guerrieri, and W. Russo, "Agent-oriented smart objects development," in Proc. IEEE 16th Int. Conf. Comput. Supported Cooperat. Work Design (CSCWD), May 2012, pp. 907-912.
4. W. Wei, X. Fan, H. Song, X. Fan, and J. Yang, "Imperfect information dynamic stackelberg game based resource allocation using hidden Markov for cloud computing," IEEE Trans. Services Comput., vol. PP, no. 99, p. 1, Feb. 2016, doi: 10.1109/TSC.2016.2528246.
5. I. Butun, M. Erol-Kantarci, B. Kantarci, and H. Song, "Cloud-centric multi-level authentication as a service for secure public safety device networks," IEEE Commun. Mag., vol. 54, no. 4, 2016.
6. H. Song, Q. Du, P. Ren, W. Li, and A. Mehmood, "Cloud computing for transportation cyber-physical systems," in Cyber-Physical Systems: A Computational Perspective, vol. 15, L. M. Patnaik, Ed. Boca Raton, FL, USA: CRC Press, 2015, pp. 351-369.
7. Y. Sun, H. Song, A. J. Jara, and R. Bie, "Internet of Things and big data analytics for smart and connected communities," IEEE Access, vol. 4, pp. 766-773, Mar. 2016, doi: 10.1109/ACCESS.2016.2529723.
8. H. Abbas, M. Q. Mahmoodzadeh, F. A. Khan, and M. Pasha, "Identifying an OpenID anti-phishing scheme for cyberspace," Secur. Commun. Netw., vol. 9, no. 6, pp. 481-491, 2014.
9. H. Abbas, C. Magnusson, L. Yngstrom, and A. Hemani, "Addressing dynamic issues in information security management," Inf. Manage. Comput. Secur., vol. 19, no. 1, pp. 5-24, 2011.
10. K. Saleem, A. Derhab, J. Al-Muhtadi, and B. Shahzad, "Human-oriented design of secure machine-to-machine communication system for e-healthcare society," Comput. Human Behavior, vol. 51, pp. 977-985, Oct. 2015.
11. H. Khattak, H. Abbas, A. Naeem, K. Saleem, and W. Iqbal, "Security concerns of cloud-based healthcare systems: A perspective of moving from single-cloud to a multi-cloud infrastructure," in Proc. 17th Int. Conf. E-Health Netw., Appl. Services (HealthCom), 2015, pp. 50-56.
12. B. M. C. Silva, J. J. P. C. Rodrigues, I. de la Torre Díez, M. López-Coronado, and K. Saleem, "Mobile-health: A review of current state in 2015," J. Biomed. Inform., vol. 56, pp. 265-272, Aug. 2015.
13. (2016). WebSCADA, Web SCADA, Automation Systems, Process Control, Historian, Event Alarm, SCADA Solution, accessed on Feb. 5, 2016. [Online]. Available: http://www.webscada.com/SCADA/SolMedSys.aspx
14. R. J. Robles and M.-K. Choi, "Assessment of the vulnerabilities of SCADA, control systems and critical infrastructure systems," Int. J. Grid Distrib. Comput., vol. 2, no. 2, pp. 27-34, 2009.
15. S. Mustard, "Security of distributed control systems: The concern increases," J. Comput. Control Eng., vol. 16, no. 6, pp. 19-25, Dec. 2005.
16. J. P. Farwell and R. Rohozinski, "Stuxnet and the future of cyber war," Survival, vol. 53, no. 1, pp. 23-40, 2011.
17. 'Flame' Spyware Infiltrating Iranian Computers, CNN, Atlanta, GA, USA, 2012.
18. J. D. Fernandez and A. E. Fernandez, "SCADA systems: Vulnerabilities and remediation," J. Comput. Sci. Colleges Arch., vol. 20, no. 4, pp. 160-168, Apr. 2005.
19. N. Ulltveit-Moe, H. Nergaard, L. Erdödi, T. Gjøsæter, E. Kolstad, and P. Berg. (2016). "Secure information sharing in an industrial Internet of Things." [Online]. Available: http://arxiv.org/abs/1601.04301
20. M. Bere and H. Muyingi, "Initial investigation of industrial control system (ICS) security using artificial immune system (AIS)," in Proc. Int. Conf. Emerg. Trends Netw. Comput. Commun. (ETNCC), 2015, pp. 79-84.
21. G. Cagalaban, T. Kim, and S. Kim, "Improving SCADA control systems security with software vulnerability analysis," in Proc. 12th WSEAS Int. Conf. Autom. Control, Modeling Simulation, 2008, pp. 409-414.
22. Y. Wang, "sSCADA: Securing SCADA infrastructure communications," Int. J. Commun. Netw. Distrib. Syst., vol. 6, no. 1, pp. 59-78, 2012.
23. C. M. Davis, J. E. Tate, H. Okhravl, C. Grier, T. J. Overbye, and D. Nicol, "SCADA cyber security testbed development," in Proc. 38th North Amer. Power Symp., Sep. 2006, pp. 483-488.
24. H. M. N. Al Hamadi, C. Y. Yeun, and M. J. Zemerly, "A novel security scheme for the smart grid and SCADA networks," Wireless Pers. Commun., vol. 73, no. 4, pp. 1547-1559, 2013.
25. D. Watts, "Security & vulnerability in electric power systems," in Proc. 35th North Amer. Power Symp., Rolla, MO, USA, Oct. 2003, pp. 559-566.
26. A. Giani, G. Karsai, T. Roosta, A. Shah, B. Sinopoli, and J. Wiley, "A testbed for secure and robust SCADA systems," in Proc. 14th IEEE Real-Time Embedded Technol. Appl. Symp., 2008, pp. 1-4.
27. A. A. Cárdenas, S. Amin, Z.-S. Lin, Y.-L. Huang, C.-Y. Huang, and S. Sastry, "Attacks against process control systems: Risk assessment, detection, and response," in Proc. 6th ACM Symp. Inf., Comput. Commun. Secur. (ASIACCS), 2011, pp. 355-366.
28. V. M. Igure and R. D. Williams, "Security and SCADA protocols," in Proc. 5th Int. Topical Meeting Nuclear Plant Instrum. Controls, Human Mach. Interface (NPIC HMIT), 2006, pp. 560-567.
29. E. Byres, M. Franz, and D. Miller, "The use of attack trees in assessing vulnerabilities in SCADA systems," in Proc. IEEE Int. Infrastruct. Survivability Workshop (IISW), Lisbon, Portugal, Dec. 2004.
30. S. Patel and P. Sanyal, "Securing SCADA systems," Inf. Manage. Comput. Secur., vol. 16, no. 4, pp. 398-414, 2008.
31. H. Kim, "Security and vulnerability of SCADA systems over IP-based wireless sensor networks," Int. J. Distrib. Sensor Netw., vol. 2012, Oct. 2012, Art. no. 268478, doi: 10.1155/2012/268478.
32. A. Khelil, D. Germanus, and N. Suri, "Protection of SCADA communication channels," in Critical Infrastructure Protection, J. Lopez, R. Setola, and S. D. Wolthusen, Eds. Berlin, Germany: Springer, 2012, pp. 177-196.
33. A. Antonini, A. Barenghi, G. Pelosi, and S. Zonouz, "Security challenges in building automation and SCADA," in Proc. Int. Carnahan Conf. Secur. Technol. (ICCST), 2014, pp. 1-6.
34. T. Baker, M. Mackay, A. Shaheed, and B. Aldawsari, "Security-oriented cloud platform for SOA-based SCADA," in Proc. 15th IEEE/ACM Int. Symp. Cluster, Cloud Grid Comput., May 2015, pp. 961-970.
35. R. Tawde, A. Nivangune, and M. Sankhe, "Cyber security in smart grid SCADA automation systems," in Proc. Int. Conf. Innov. Inf., Embedded Commun. Syst. (ICIIECS), Mar. 2015, pp. 1-5.
36. A. Nicholson, S. Webber, S. Dyer, T. Patel, and H. Janicke, "SCADA security in the light of cyber-warfare," Comput. Secur., vol. 31, no. 4, pp. 418-436, 2012.
37. Y. Cherdantseva et al., "A review of cyber security risk assessment methods for SCADA systems," Comput. Secur., vol. 56, pp. 1-27, Feb. 2015.
38. W. Knowles, D. Prince, D. Hutchison, J. F. P. Disso, and K. Jones, "A survey of cyber security management in industrial control systems," Int. J. Crit. Infrastruct. Protect., vol. 9, pp. 52-80, Jun. 2015.
39. (2016). European Commission: CORDIS: Projects & Results Service: Periodic Report Summary 1 - PRECYSE (Prevention, Protection and Reaction to Cyber Attacks to Critical Infrastructures), accessed on Feb. 3, 2016. [Online]. Available: http://cordis.europa.eu/result/rcn/149966-en.html
40. B. Zhu, A. Joseph, and S. Sastry, "A taxonomy of cyber attacks on SCADA systems," Ph.D. dissertation, Dept. Elect. Eng. Comput. Sci., Univ. California, Berkeley, CA, USA, 2012.
41. Security and Privacy Controls for Federal Information Systems and Organizations, NIST Special Pub. 800-53 Revision 4, National Institute of Standards and Technology, 2013.
42. Guide to Industrial Control Systems (ICS) Security, Nat. Inst. Standards Technol. (NIST), USA, 2015.
43. S. Karnouskos, A. W. Colombo, and T. Bangemann, "Trends and challenges for cloud-based industrial cyber-physical systems," Industrial Cloud-Based Cyber-Physical Systems. 2014, pp. 231-240.