The Ohio State Model of ICS Cybersecurity

EasyChair Preprint no. 7183

Abstract

We propose a simple framework for Industrial Control System (ICS) system cybersecurity. The proposed system is based on considerations which include known vulnerabilities, safety issues, and the centrality of assets in hypothetical attack vectors. We relate the proposed system to the  Purdue Model and two optimization formulations from the literature. We also relate our point system to the results of a recent penetration testing exercise on a manufacturing robotic cell. Finally, we discuss multiple challenges including that posed by legacy equipment and threats to manufacturing uptime.

Keyphrases: air gap, Cyber Security, decision tree models, Purdue Model, vulnerability management, Zero Trust

@Booklet{EasyChair:7183,
  author = {Theodore Allen and John McCarty and Tu Feng and Shih-Hsien Tseng and Vimal Buck and Robert Pardee},
  title = {The Ohio State Model of ICS Cybersecurity},
  howpublished = {EasyChair Preprint no. 7183},

  year = {EasyChair, 2021}}