"How Long is a Piece of String" : Defining Key Phases and Observed Challenges within ICS Risk Assessment

Green, Benjamin and Prince, Daniel David Campbell and Busby, Jeremy Simon and Hutchison, David (2017) "How Long is a Piece of String" : Defining Key Phases and Observed Challenges within ICS Risk Assessment. In: CPS '17 Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy :. ACM, USA, pp. 103-109. ISBN 9781450353946

PDF (sample-sigconf)
sample_sigconf.pdf - Accepted Version
Available under License Creative Commons Attribution-NonCommercial.
Download (451kB)

Abstract

The numbers and severity of global cyber security attacks on Industrial Control Systems have increased over recent years. However, there are also signi cant e orts to improve defensive capabilities. While comprehensive reviews of risk assessment e orts exist, little detail is currently available on how they are being applied by security practitioners. This paper provides a summary of the approaches adopted by security practitioners, outlining key phases applied to risk assessment, application of existing prede ned methodologies, and challenges faced throughout the overall process.