Framework for Identifying Cybersecurity Risks in Manufacturing

Procedia Manufacturing

Volumn 1, Issue , 2015, Pages 47-63

  Hutchins, Margot J ^a   Bhinge, Raunak ^b   Micali, Maxwell K ^b   Robinson, Stefanie L ^b   Sutherland, John W ^c   Dornfeld, David ^b  

^a SANDIA NATIONAL LABORATORIES   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c PURDUE UNIVERSITY   (United States)

Author keywords

Advanced Manufacturing; Cybersecurity; Data Analytics; Risk

Indexed keywords

DATA ANALYTICS; DIGITAL STORAGE; INDUSTRIAL RESEARCH; NETWORK SECURITY; RISK MANAGEMENT; RISKS; SUPPLY CHAINS;

ADVANCED MANUFACTURING; AUTOMOTIVE MANUFACTURERS; CAPITAL ASSET; CYBER SECURITY; DIGITAL COMPUTATION; MANUFACTURING ENTERPRISE; OFF-SITE DATA STORAGE; RISK MANAGEMENT PROCESS;

MANUFACTURE;

EID: 85001088093     PISSN: None     EISSN: 23519789     Source Type: Conference Proceeding    
DOI: 10.1016/j.promfg.2015.09.060     Document Type: Conference Paper

References (40)

1. Albright D, Brannan P, and Walrond C. Stuxnet Malware and Natanz: Update of ISIS December 22, 2010 Report, Institute for Science and International Security Report, 2011. Accessed from http://isis-online.org on 10/27/14.
2. Bhinge R, Park J, Biswas N, Helu M, Dornfeld D, Law K, and Rachuri S. An Intelligent Machine Monitoring System Using Gaussian Process Regression for Energy Prediction. In: IEEE International Conference on Big Data (IEEE BigData 2014), Washington, DC, 2014.
3. A.A. Cárdenas, S. Amin, and S. Sastry Research Challenges for the Security of Control Systems, In: Proceedings of the 3rd conference on Hot topics in security, HOTSEC'08 Article No. 6 2008
4. Cárdenas, A.A., S. Amin, B. Sinopoli, A. Giani, A. Perrig, and S. Sastry, 2009, Challenges for securing cyber physical systems. In: Workshop on Future Directions in Cyber-Physical Systems Security. DHS; 2009.
5. Clark D, Berson T, and Lin HS (Eds). At the Nexus of Cybersecurity and Public Policy: Some Basic Concepts and Issues. National Academies Press, Washington DC, 2014.
6. Council on CyberSecurity. Critical Security Controls for Effective Cyber Defense. 2014. Accessed from http://www.counciloncybersecurity.org/on 11/04/14.
7. Dyadem Press. Guidelines for Failure Mode and Effects Analysis (FMEA), for Automotive, Aerospace, and General Manufacturing Industries. CRC Press, Boca Raton, Fl, 2003.
8. Department of Homeland Security. DHS Risk Lexicon: 2010 Edition.
9. Department of Homeland Security. Our Mission. 2012. Accessed from http://www.dhs.gov/our-mission on 10/22/14.
10. DeVor RE, Change T, and Sutherland JW. Statistical Quality Design and Control. Prentice Hall, 2007.
11. Defense Science Board. Resilient Military Systems & Cyber Threat. 2013. Accessed from http://www.acq.osd.mil/dsb/reports/ResilientMilitarySystems.CyberThreat.pdf on 11/4/14.
12. Dornfeld D, Wright P, Vijayaraghavan A, and Helu M. Enabling Manufacturing Research through Interoperability. In: Transactions of NAMRI/SME, 37, 2009, pp.443-450.
13. Federal Bureau of Investigation. Intellectual Property Theft. 2014. Accessed from www.fbi.gov on 10/30/14.
14. Forbes Target Data Breach Spilled Info on as Many as 70 Million Customers 2014. Accessed from forbes.com on 10/14/14. Fortune. The Digital Factory. 130 10 2014 92 110
15. Helu M, Robinson S, Bhinge R, Bänziger T, and Dornfeld D. Development of a Machine Tool Platform to Support Data Mining and Statistical Modeling of Machining Processes. In: Proc MTTRF 2014 Annual Meeting, San Francisco, CA, 2014.
16. International Society of Automation. ANSI/ISA-62443-2-1: Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program. 2009.
17. International Organization for Standardization. Technical Specification ISO/TS 16949, Quality Management Systems; Automotive Suppliers. 2009.
18. International Organization for Standardization. Standard: Information technology - Security techniques - Information security management systems - Requirements. 2013.
19. Kushner D. The Real Story of Stuxnet. In: IEEE Spectrum. 2013. Accessed from http://spectrum.ieee.org on 10/27/14.
20. J.R. Lindsay Stuxnet and the Limits of Cyber Warfare Security Studies 22 3 2013 365 404
21. Mandiant. APT1: Exposing One of China's Cyber Espionage Units. 2013. Accessed from http://intelreport.mandiant.com on 10/26/14.
22. Merriam-Webster Dictionary. Definition of Risk. 2014. Accessed from http://www.merriam-webster.com/dictionary/risk on 10/20/14.
23. New York Times. Sony Films Are Pirated, and Hackers Leak Studio Salaries. In press December 2, 2014, accessed from www.nytimes.com on 1/26/15.
24. New York Times. More Sanctions on North Korea After Sony Case. In press January 2, 2015, accessed from www.nytimes.com on 1/26/15.
25. National Research Council. The Owner's Role in Project Risk Management. The National Academies Press, Washington D.C. 2005,.
26. National Defense Industrial Association. Cybersecurity for Advanced Manufacturing. 2014. Accessed from www.ndia.org on 09/22/14.
27. NIST. Security and Privacy Controls for Federal Information Systems and Organizations. 2013. Accessed from http://dx.doi.org/10.6028/NIST.SP.800-53r4 on 1/26/15.
28. NIST. Framework for Improving Critical Infrastructure Cybersecurity. 2014. Accessed from http://www.nist.gov/cyberframework/on 2/28/14.
29. Office of the White House. Cyberspace Policy Review: Assuring a Trusted and Resilient Information and Communications Infrastructure. May 2009. Accessed from http://www.whitehouse.gov/assets/documents/Cyberspace-Policy-Review-final.pdf on 07/30/14.
30. The President. Executive Order 13636: Improving Critical Infrastructure Cybersecurity. In: Federal Register, 2013, 78(33).
31. SANS. Security 401: SANS Security Essentials Bootcampstyle. 2013. Course material.
32. Symantec. Internet Security Threat Report: 2014. Accessed from www.symantec.com on 10/26/14.
33. PCAST. Report to the President on Ensuring American Leadership in Advanced Manufacturing., 2011. Accessed from http://www.whitehouse.gov on 11/04/14.
34. Wall Street Journal. Home Depot's 56 Million Card Breach Bigger Than Target's. 2014a. Accessed from online.wsj.com on 10/15/14.
35. Wall Street Journal. J.P. Morgan Says About 76 Million Households Affected by Cyber Breach. 2014b. Accessed from online.wsj.com on 11/04/14.
36. Verizon. 2013 Data Breach Investigations Report. 2014. Accessed from https://ics-cert.us-cert.gov on 10/26/14.
37. Vijayaraghavan A, Sobel W, Fox A, Dornfeld D, and Wright P. (Improving machine tool interoperability using standard interface protocols: MTConnect. In: Proceeding of 2008 International Symposium on Flexible Automation, 2008, Atlanta, USA.
38. Wang Y, Ma S, and Ren L. A security framework for cloud manufacturing. In:Proceedings of the ASME 2014 International Manufacturing Science and Engineering Conference, June 9-13, 2014, Detroit, Michigan, USA.
39. L.J. Wells, J.A. Camelio, C.B. Williams, and J. White Cyber-physical security challenges in manufacturing systems Manufacturing Letters 2 2014 74 77
40. Yoe C. Principles of Risk Analysis: Decision Making Under Uncertainty. CRC Press, 2011.