Implementation of Defense in Depth Strategy to Secure Industrial Control System in Critical Infrastructures
American Journal of Artificial Intelligence
Volume 3, Issue 2, December 2019, Pages: 17-22
Received: Nov. 18, 2019;
Accepted: Dec. 13, 2019;
Published: Jan. 16, 2020
Views 368 Downloads 105
Tschroub Abdelghani, Direction of Telecommunications, Sonelgaz, Algiers, Algeria
Follow on us
The goal of this communication is to examine the implementation of defense in depth strategy to secure the industrial control systems (ICS) from threats, hackers, vandals and other ones that can damage the critical infrastructures (gas transportation network, power transmission network, power generation, power distribution grids, air traffic, petrochemical industries, rail traffic, military industries) and others big infrastructures that affect large number of persons and security of nations . The defense in depth concept ensures the physical access protection of the infrastructure, using network access control system (NAC) and traditional security measures, and implements policies and procedures that deal training and cybersecurity awareness programs, risk assessment (analyzing and documenting), and the plan of security. The philosophy of defense in depth uses also the IT technologies in order to ensure separation and segmentations of the networks to the VLANs, demilitarized zones, VPN, using firewalls, switch and routers. The hardening of different systems installed like routers, firewalls, switches and other devices on the network such as SCADA servers is a very sensitive operation of defense in depth. The last important operations are monitoring and maintenance, the monitoring serve to detect and stop intrusions attempts before they can damage the control system with using detection and protection system (IDS/IPS), and the maintenance operations control system (soft and hard), schedule updating of anti-virus software on different devices installed in the network like (computers, SCADA servers, routers, switch and other devices). The defense-in-depth recommendations described in this document can decrease the risk of attacks can target industrial network architectures, like VLAN hopping, SQL injection on SCADA, IP spoofing and DoS (denies of service) and others ones. The risk of attacks can use a common point of access as point of failures (RTU, corporate VPNs, database links, wireless communication, and IT controlled communication equipment). The implementation strict of the defense in depth concept can avoid important damage of critical infrastructures such as loss of production, damage to plant, impact on reputation, impact of health, impact of safety, impact of environment and impact on nation’s security.
ICS, SCADA, Cybersecurity, IDS, IPS, Defense in Depth, Demilitarized Zones (DMZ), Firewall, Next Generation Firewall
To cite this article
Implementation of Defense in Depth Strategy to Secure Industrial Control System in Critical Infrastructures, American Journal of Artificial Intelligence.
Vol. 3, No. 2,
2019, pp. 17-22.
Copyright © 2019 Authors retain the copyright of this article.
This article is an open access article distributed under the Creative Commons Attribution License (http://creativecommons.org/licenses/by/4.0/
) which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
TSCHROUB Abdelghani. Industrial control system (ICS) security in power transmission network. February 2019, Algerian Large Electrical Network Conference (CAGRE). IEEE conferences.
Keith Stouffer, Victoria Pillitteri, Suzanne Lightman, Marshall Abrams Adam Hahn. Guide to Industrial Control Systems (ICS) Security. Supervisory Control and Data Acquisition (SCADA) Systems, Distributed Control Systems (DCS), and Other Control System Configurations such as Programmable Logic Controllers (PLC). NIST Special Publication 800-82 Revision 2. National Institute of Standards and Technology. U.S. Department of Commerce. May 2015.
Cybersecurity Good Practices Guide HA032968 Issue 1 July 2017. Schneider electric. www.eurotherm.nl.
Dylan Jenkins. Grid Automation Cyber Security. September 2019. ABB.
Handbook for Self-Assessing Security Vulnerabilities & Risks of Industrial Control Systems on DoD Installations. December 2012. USA Departement of defence. www.wbdg.org.
Homeland Security. Recommended Practice: Improving Industrial Control System Cybersecurity with Defense-in-Depth Strategies. Industrial Control Systems Cyber Emergency Response Team. September 2016. www.iiconsortium.org.
NSTB Assessments Summary Report: Common Industrial Control System Cyber Security Weaknesses. The INL is a U.S. Department of Energy National Laboratory operated by Battelle Energy Alliance. May 2010. www.fas.org.
Matus Korman Industrial information and control systems, KTH. Cyber Security in Power Systems. 2016. www.kth.se.
Rafay Baloch. Ethical hacking and penetration testing guide.
Jason Allnutt, Dhananjay Anand, Douglas Arnold, Allen Goldstein, Ya-Shian Li-Baboud, Aaron Martin, Cuong Nguyen, Robert Noseworthy, Ravi Subramaniam, Marc Weiss. Timing Challenges in the Smart Grid.
Richard Candell, Timothy Zimmerman, Keith Stouffer, An Industrial Control System Cybersecurity Performance Testbed, http://dx.doi.org/10.6028/NIST.IR.8089.november 2015.
Dr EDWARD. G AMOROSO. 2017 Tag cyber security annual. Volume 1. Practical Handbook and reference guide for the working cyber security professional. Version 1.0 September 2016. attivonetworks.com.
Arthur Gervais. Security Analysis of Industrial Control Systems. Master's Thesis Espoo, June 29, 2012. KTH Stockholm and Aalto University.
Der-Yeuan Yuy, Aanjhan Ranganathany, Thomas Locherz, Srdjan Capkuny, David Basin. Short Paper: Detection of GPS Spoofing Attacks in Power Grids.
Teodor Sommestad, Göran N. Ericsson. SCADA System Cyber Security – A Comparison of Standards.
TALBANI Rachid. Industrial Security the essential basics for industrial automation. Siemens.