International Journal of Scientific Research and Engineering Development

International Journal of Scientific Research and Engineering Development

( International Peer Reviewed Open Access Journal ) ISSN [ Online ] : 2581 - 7175

IJSRED » Archives

Submit Your Manuscript OnlineIJSRED

Industrial Control Systems Cyber Security Resilience & importance of Remote Laboratory

    International Journal of Scientific Research and Engineering Development (IJSRED)

Full Text:

Published Issue : Volume-3 Issue-6
Year of Publication : 2020
Unique Identification Number : IJSRED-V3I6P15
Authors : Deshabhushan Chougule
: Click Here

Abstract :

Increase of Information & Operational Technology (IT/OT) applications into Industrial Control Systems (ICS) has improved the scalability & flexibility of the systems as well as it has enabled the possibility to access them from external nodes. However, in many cases, this evolution has exposed the Industrial Control Systems to a series of unprepared threats. These threats are currently found in most of critical infrastructures.
Although, it’s not realistic to protect against every cyber threat but a resilience at certain level of threat can be achieved to safeguard Industrial Control Systems. Looking at larger potential consequences, the existing cyber resilience is not adequate. This situation can be improved through effective adoption of existing standards, processes & resources. Internal policies & procedures (like User Management & Role Based Access Control, Regular Maintenance, Backup & Recovery etc.) with appropriate architecture of redundant Control Systems can have a substantial impact as well as its ability to withstand or recover from a cyber incident. Further some Node & Network based Controls (like System Hardening & Application Control, Antivirus & Security Update Management, Network Segregation & IPSec, Firewall Rules etc.) can be used as recovery actions against corresponding Resilience categories.
In this case, we can prepare a Remote Laboratory based on the replication of a simple Industrial Control System that enables performing cybersecurity tests instead on real ones.