Synthesis and Analysis of Cyber-Security Measures for Process Control Systems

Abstract

Although threats of cyber-security appear in industrial process control systems, there are few discussions to prevent serious accidents such as explosion or leakage of dangerous contents. In this paper, serious accidents are dealt with hazards of cyber-security. The measures to mitigate the risks and an evaluation method of their effectiveness are proposed utilizing characteristics of process control. Measures are planned based on zones. Zones are designed to separate controllers and sensors which are AND causes of FTA. In cyber-security risk assessment, risk mitigations of measures are evaluated with possibility to succeed the attack to cause serious accidents instead of frequency in safe risk assessment.