SCADA system security: Challenges and recommendations

Abstract

The present state of supervisory control and data acquisition (SCADA) system security is not commensurate with the vulnerabilities, threats as on today and potential consequences. Many of the SCADA systems are relatively insecure systems with chronic and pervasive vulnerabilities. Perceived information security risks are rarely discussed and evaluated at management level. Information security aspect of computer controlled critical infrastructures must be critically analyzed. Trojans like stuxnet and night dragon have surfaced in recent past at many places. These alarms need to be taken seriously. Computer controlled infrastructures should be subjected to a tough scrutiny. Challenges for SCADA system security are discussed in this paper. Recommendations have been made to strengthen the security measures at computer controlled critical infrastructures like smart grid, transportation control, water distribution and others. These recommendations, when implemented, will bring down significantly the risk of failure at critical infrastructures.