Cybersafety Analysis of Industrial Control Systems: Chiller Systems

Abstract

Recent world events and geopolitics have brought the vulnerability of critical infrastructure to cyberattacks by advanced cyber-adversaries to the forefront. While there has been continued and growing attention to vulnerabilities in our energy generation and distribution systems, there are many other types of industrial control systems, ranging from manufacturing facilities to refineries to water treatment plants, that are also at significant risk based on their unique physical characteristics. In this paper, we take a holistic view of one such complex system – the chiller plant – in an archetypal industrial setting to identify vulnerabilities emerging from interactions between technology, operator actions as well as organizational structure and provide recommendations to mitigate resulting loss scenarios.