Mitigations for security vulnerabilities found in control system networks

May Permann; John Hammer; Kathy Lee; Ken Rohde

Mitigations for security vulnerabilities found in control system networks

May Permann
, John Hammer
, Kathy Lee
, Ken Rohde

Cybercore Integration Center

Research output: Contribution to conference › Paper › peer-review

5 Scopus citations

Abstract

Industry is aware of the need for Control System (CS) security, but in on-site assessments, Idaho National Laboratory (INL) has observed that security procedures and devices are not consistently and effectively implemented. The Department of Homeland Security (DHS), National Cyber Security Division (NCSD), established the Control Systems Security Center (CSSC) at INL to help industry and government improve the security of the CSs used in the nation's critical infrastructures. One of the main CSSC objectives is to identify control system vulnerabilities and develop effective mitigations for them. This paper discusses common problems and vulnerabilities seen in on-site CS assessments and suggests mitigation strategies to provide asset owners with the information they need to better protect their systems from common security flaws.

Original language	English
Pages	583-594
Number of pages	12
State	Published - 2006
Event	16th Annual Joint ISA POWID/EPRI Controls and Instrumentation Conference and 49th Annual ISA Power Industry Division, POWID Symposium 2006 - San Jose, CA, United States Duration: Jun 4 2006 → Jun 9 2006

Conference

Conference	16th Annual Joint ISA POWID/EPRI Controls and Instrumentation Conference and 49th Annual ISA Power Industry Division, POWID Symposium 2006
Country/Territory	United States
City	San Jose, CA
Period	06/4/06 → 06/9/06

Keywords

Control system
Cyber security
DMZ
Encryption
Firewall
IDS
Mitigation
SCADA

Cite this

@conference{08c8e25e187b4730974553eb3b0d4b1a,

title = "Mitigations for security vulnerabilities found in control system networks",

abstract = "Industry is aware of the need for Control System (CS) security, but in on-site assessments, Idaho National Laboratory (INL) has observed that security procedures and devices are not consistently and effectively implemented. The Department of Homeland Security (DHS), National Cyber Security Division (NCSD), established the Control Systems Security Center (CSSC) at INL to help industry and government improve the security of the CSs used in the nation's critical infrastructures. One of the main CSSC objectives is to identify control system vulnerabilities and develop effective mitigations for them. This paper discusses common problems and vulnerabilities seen in on-site CS assessments and suggests mitigation strategies to provide asset owners with the information they need to better protect their systems from common security flaws.",

keywords = "Control system, Cyber security, DMZ, Encryption, Firewall, IDS, Mitigation, SCADA",

author = "May Permann and John Hammer and Kathy Lee and Ken Rohde",

year = "2006",

language = "English",

pages = "583--594",

note = "16th Annual Joint ISA POWID/EPRI Controls and Instrumentation Conference and 49th Annual ISA Power Industry Division, POWID Symposium 2006 ; Conference date: 04-06-2006 Through 09-06-2006",

}

Mitigations for security vulnerabilities found in control system networks. / Permann, May; Hammer, John; Lee, Kathy et al.
2006. 583-594 Paper presented at 16th Annual Joint ISA POWID/EPRI Controls and Instrumentation Conference and 49th Annual ISA Power Industry Division, POWID Symposium 2006, San Jose, CA, United States.

Research output: Contribution to conference › Paper › peer-review

TY - CONF

T1 - Mitigations for security vulnerabilities found in control system networks

AU - Permann, May

AU - Hammer, John

AU - Lee, Kathy

AU - Rohde, Ken

PY - 2006

Y1 - 2006

N2 - Industry is aware of the need for Control System (CS) security, but in on-site assessments, Idaho National Laboratory (INL) has observed that security procedures and devices are not consistently and effectively implemented. The Department of Homeland Security (DHS), National Cyber Security Division (NCSD), established the Control Systems Security Center (CSSC) at INL to help industry and government improve the security of the CSs used in the nation's critical infrastructures. One of the main CSSC objectives is to identify control system vulnerabilities and develop effective mitigations for them. This paper discusses common problems and vulnerabilities seen in on-site CS assessments and suggests mitigation strategies to provide asset owners with the information they need to better protect their systems from common security flaws.

AB - Industry is aware of the need for Control System (CS) security, but in on-site assessments, Idaho National Laboratory (INL) has observed that security procedures and devices are not consistently and effectively implemented. The Department of Homeland Security (DHS), National Cyber Security Division (NCSD), established the Control Systems Security Center (CSSC) at INL to help industry and government improve the security of the CSs used in the nation's critical infrastructures. One of the main CSSC objectives is to identify control system vulnerabilities and develop effective mitigations for them. This paper discusses common problems and vulnerabilities seen in on-site CS assessments and suggests mitigation strategies to provide asset owners with the information they need to better protect their systems from common security flaws.

KW - Control system

KW - Cyber security

KW - DMZ

KW - Encryption

KW - Firewall

KW - IDS

KW - Mitigation

KW - SCADA

UR - https://www.scopus.com/pages/publications/33750295955

M3 - Paper

AN - SCOPUS:33750295955

SP - 583

EP - 594

T2 - 16th Annual Joint ISA POWID/EPRI Controls and Instrumentation Conference and 49th Annual ISA Power Industry Division, POWID Symposium 2006

Y2 - 4 June 2006 through 9 June 2006

ER -

Mitigations for security vulnerabilities found in control system networks

Abstract

Conference

Keywords

Other files and links

Fingerprint

Cite this