Evolution and Trends of Industrial Control System Cyber Incidents since 2017

Robert Grubbs, Jeremiah Stoddard, Sarah Freeman and Ron Fisher

Journal of Critical Infrastructure Policy, 2021, vol. 2, issue 2, 45-79

Abstract: The industrial control systems (ICSs) that manage our critical infrastructure are increasingly converging with corporate networks and the Internet as technology and businesses prioritize digital connectivity. These connections make them more vulnerable and available to malicious cyber actors who traditionally targeted the companies' more public‐facing information technology (IT) networks. This paper will review select publicly reported cyber incidents to highlight the continued and growing threat to ICS devices and operational technology (OT) environments. It will summarize the incident and when available, will provide information on the cyber actors, the vulnerabilities they exploited, and any publications the U.S. Government (USG) provided in response. Data belonging to the Department of Homeland Security (DHS) will be used to highlight quantitative trends concerning ICS incidents. This paper builds on “History of Industrial Control System Cyber Incidents” (Hemsley & Fisher 2018), a paper that highlighted select noteworthy threats and incidents to ICS systems up to 2017. This paper will similarly review select incidents occurring after the last previously reviewed incident, Triton/HatMan, December 2017, and will note ICS incident trends including IT/OT convergence and advances in cyber‐threat actors' capabilities in observed in the examined incidents.

Date: 2021
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://doi.org/10.18278/jcip.2.2.4

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:wly:crtinf:v:2:y:2021:i:2:p:45-79

Access Statistics for this article

More articles in Journal of Critical Infrastructure Policy from John Wiley & Sons
Bibliographic data for series maintained by Wiley Content Delivery ().