Cyberstudy
PDF p.172 In progress

Industrial Control Systems

Open PDF at p.172 23 flashcards

Summary

PDF p.172

Industrial Control Systems (ICS) automate workflows and processes in critical infrastructure sectors like power, water, health services, telecommunications, and national security. ICS includes Distributed Control Systems (DCS) and Supervisory Control and Data Acquisition (SCADA) systems, which manage and monitor plant devices and equipment.

In plain words

Supplementary — not from your PDF

Industrial control systems (ICS) run physical processes in critical infrastructure. PLCs control machinery, sensors and actuators interact with the physical world, HMIs let operators see and control it, and a data historian records everything. SCADA manages large ICS spread over many sites, often over cellular or satellite links. These systems were built for reliability, not security, so segmentation and monitoring are essential. NIST SP 800-82 gives guidance.

Detailed explanation

PDF p.172
  • Workflow and Process Automation Systems
    • Definition: ICS control machinery in critical infrastructure.
    • Components: Embedded programmable logic controllers (PLCs), actuators, sensors, human-machine interfaces (HMIs), and control servers.
    • Function: PLCs linked by OT fieldbus or industrial Ethernet control mechanical components and monitor local states like temperature.
    • Data Historian: Database of all information generated by the control loop.
  • Supervisory Control and Data Acquisition (SCADA)
    • Definition: Manages large-scale, multiple-site ICSs.
    • Components: Software on ordinary computers, field devices with embedded PLCs.
    • Communication: Uses WAN (cellular or satellite) to link SCADA server to field devices.
  • ICS/SCADA Applications
    • Energy: Power generation and distribution, utilities (water/sewage, transportation).
    • Industrial: Mining, refining, hazardous processes.
    • Fabrication and Manufacturing: Automated production systems, high precision.
    • Logistics: Automated transport, lift systems, component tracking.
    • Facilities: Site and building management (HVAC, lighting, security).
  • Security Considerations
    • Historical Context: Initially built without IT security considerations.
    • Current Awareness: High necessity for enforcing security controls.
    • Example Attack: Stuxnet worm targeting SCADA management software.
    • NIST Recommendations: Special Publication 800-82 for ICS/SCADA security controls.
  • Cybersecurity in ICS/SCADA
    • Importance: Critical for public safety, economic stability, national security.
    • Risks: Malware, ransomware, unauthorized access, targeted attacks.
    • Protections: Network segmentation, access controls, intrusion detection, encryption, continuous monitoring.

Important terms

taken from the text above
Workflow and Process Automation Systems
ICS control machinery in critical infrastructure.
Data Historian
Database of all information generated by the control loop.
Supervisory Control and Data Acquisition (SCADA)
Manages large-scale, multiple-site ICSs.
Energy
Power generation and distribution, utilities (water/sewage, transportation).
Industrial
Mining, refining, hazardous processes.
Fabrication and Manufacturing
Automated production systems, high precision.
Logistics
Automated transport, lift systems, component tracking.
Facilities
Site and building management (HVAC, lighting, security).
Historical Context
Initially built without IT security considerations.
Current Awareness
High necessity for enforcing security controls.
Example Attack
Stuxnet worm targeting SCADA management software.
NIST Recommendations
Special Publication 800-82 for ICS/SCADA security controls.
Protections
Network segmentation, access controls, intrusion detection, encryption, continuous monitoring.
ICS Industrial Control Systems DCS Distributed Control Systems SCADA Supervisory Control and Data Acquisition

Examples & real-world scenarios

Supplementary — not from your PDF
  • A water utility's SCADA system controlling pumps at remote sites.
  • An HMI screen showing a production line's status.
  • Stuxnet, a historical attack on SCADA management software.

Scenario

A power plant's ICS network was connected to the corporate LAN for convenience. Segmenting it, with strict controls and monitoring between IT and OT, reduces the risk of office malware reaching the plant.

Common mistakes

Supplementary — not from your PDF
  • Mixing up SCADA (large, multi-site supervision) and a single PLC (local control).
  • Applying IT-style changes such as reboots and auto-patching to OT without testing. Availability and safety come first.

Practical skills

Supplementary — not from your PDF
  • Name the main ICS components and what each does.
  • Suggest defensive controls for an ICS network.

What I should remember

Key Points PDF p.172
  • Workflow and Process Automation
    • ICS Components: PLCs, actuators, sensors, HMIs, control servers.
    • Data Historian: Information database.
  • SCADA
    • Large-Scale Management: Multiple-site ICSs.
    • WAN Communication: Cellular or satellite links.
  • Applications
    • Energy: Power and utilities.
    • Industrial: Mining, refining.
    • Manufacturing: High precision production.
    • Logistics: Transport and tracking.
    • Facilities: Building management.
  • Security
    • Historical Lack: Initial absence of IT security.
    • Current Necessity: Enforcing security controls.
    • Example Attack: Stuxnet worm.
    • NIST Guidelines: Special Publication 800-82.
  • Cybersecurity
    • Critical Importance: Public safety, economic stability, national security.
    • Risks: Malware, ransomware, unauthorized access.
    • Protections: Segmentation, access controls, intrusion detection, encryption.