Handbook of SCADA/Control Systems Security
Edited by Robert Radvanovsky, Jacob Brodsky
CRC Press – 2013 – 383 pages
The availability and security of many services we rely upon—including water treatment, electricity, healthcare, transportation, and financial transactions—are routinely put at risk by cyber threats. The Handbook of SCADA/Control Systems Security is a fundamental outline of security concepts, methodologies, and relevant information pertaining to the supervisory control and data acquisition (SCADA) systems and technology that quietly operate in the background of critical utility and industrial facilities worldwide.
Divided into five sections, the book examines topics comprising functions within and throughout industrial control systems (ICS) environments. Topics include:
The final chapters outline the data relied upon for accurate processing, discusses emerging issues with data overload, and provides insight into the possible future direction of ISC security.
The book supplies crucial information for securing industrial automation/process control systems as part of a critical infrastructure protection program. The content has global applications for securing essential governmental and economic systems that have evolved into present-day security nightmares. The authors present a "best practices" approach to securing business management environments at the strategic, tactical, and operational levels.
Social Implications and Impacts
Introduction; Robert Radvanovsky
Sociological and Cultural Aspects; Jacob Brodsky
Threat Vectors; Jim Butterworth
Risk Management; Wayne Boone
Governance and Management
Disaster Recovery and Business Continuity of SCADA; Steven Young
Incident Response and SCADA; Steven Young
Forensics Management; Craig Wright
Governance and Compliance; Wayne Boone
Architecture and Modeling
Communications and Engineering Systems; Jacob Brodsky
Metrics Framework for a SCADA System; Robert Radvanovsky
Network Topology and Implementation; Jacob Brodsky
Commissioning and Operations
Obsolescence and Procurement of SCADA; Bernie Pella
Patching and Change Management; Bernie Pella
Physical Security Management; Allan McDougall and Jeff Woodruff
Tabletop/Red-Blue Exercises; Robert Radvanovsky
Integrity Monitoring; Craig Wright
Data Management and Records Retention; Jacob Brodsky
Conclusion and References
The Future of SCADA and Control Systems Security; Robert Radvanovsky
Appendix A—Listing of Online Resources SCADA/Control Systems
Appendix B—Terms and Definitions
Robert Radvanovsky is an active professional in the United States with knowledge in security, risk management, business continuity, disaster recovery planning, and remediation. He has significantly contributed to establishing several certification programs, specifically on the topics of "critical infrastructure protection" and "critical infrastructure assurance." He has published a number of articles and white papers regarding this topic. Significantly involved in establishing security training and awareness programs through his company, his extracurricular activities also include working several professional accreditation and educational institutions, specifically on the topics of homeland security, critical infrastructure protection and assurance, and cyber security.Jacob Brodsky has worked on every aspect of SCADA and control systems for Washington Suburban Sanitary Commission (WSSC)—from the assembly language firmware of the RTU, to the communications protocols, the telecommunications networks, the data networks, systems programming, protocol drivers, HMI design, and PLC programming. In 2012, he was elected chairman of the DNP User group. Jake has contributed to the NIST SP 800-82 effort and to the ISA-99 effort. He is a registered professional engineer of control systems in the state of Maryland.