Current Cyber Security Challenges in ICS

Abstract

After a cyber-incident on an Industrial Control System (ICS), there is frequently an immediate incident response. However, after restoring the critical service, there is often little in the way of forensics to discover the source, impact, or events of the attack. In part, this is due to the challenge areas in ICSs cybersecurity outlined in this document. This paper discusses common challenges, some mitigations to those challenges, and applies them briefly to past attacks.