BLUF: This article discusses the vulnerabilities that are in critical infrastructure systems and how SCADA helps mitigate those risks.

SCADA

What is SCADA?

               SCADA stands for Supervisory Control and Data Acquisition, it is an industrial control system. This system is used to oversee and manage large-scale operations, including infrastructure processes (such as oil pipelines and water treatment centers), facility-based processes (like cargo ships and airports), and industrial processes (like food production or power generation).

How does it work?

               A SCADA system will use sensors or field devices to collect information from the environment to send to the system for analysis. Remote Terminal Units (RTUs) are devices that will collect data from these sensors and send it to the central SCADA system. Programmable Logic  Controllers (PLCs) are used to automate processes, monitor systems status, and control machinery; they are similar to RTUs but are more versatile in use. A SCADA system’s software is specifically designed to run on the central control system, collect data, analyze the information, and provide human operators with the tools to take action. This software includes Human-Machine Interfaces (HMIs), which enable data to be visually understandable to humans. Two integral parts of a SCADA system is its communication networks and its databases, which is how data can flow between devices and be stored for further use.

Vulnerabilities with Critical Infrastructure Systems

               Critical Infrastructure Systems are a target for hacking and cyberattacks, as these systems handle crucial operations within a society; the Stuxnet computer virus, a worm that targeted PLCs, is an example of this.  Another crucial cybersecurity threat is the insider threat, where an employee can intentionally or unintentionally cause a security breach, data loss, or system malfunction.

               These systems don’t exist in a vacuum and can experience physical threats as well. Natural disasters can damage these systems; the Fukushima Daiichi nuclear reactors were severely damaged by a 15-meter tsunami, which disabled the power and cooling systems. They are also subject to human disasters, such as terrorism or vandalism.

               The last vulnerability I’ll cover is aging infrastructure; these systems are typically built on legacy technology, which can’t be easily integrated with newer technologies and, therefore, struggle to handle modern threats effectively.

SCADA’s Role in Mitigating Risks

               SCADA systems can provide real-time monitoring and control, enabling the detection of system breaches and a rapid response to security threats, which can help minimize damage. These controls can include automated responses, such as shutting down compromised components or redirecting traffic during a cyberattack.

               To help with in-person risk, authentication can be added to access controls to minimize human error. This prevents unauthorized or inexperienced employees from accessing sensitive data. Of course this doesn’t account for intentional breaches.

               One last action it can do is integrate broader cybersecurity infrastructures like Security Information and Event Management (SIEM) systems. I know I said integration is difficult, but that doesn’t mean it isn’t worth the effort if it means comprehensive protection of data and operations.

Conclusion

               Supervisory Control and Data Acquisition are crucial for major operations throughout communities.  Critical Information systems aren’t perfect; they do have flaws that can be exploited. SCADA can help minimize the damage and threat.

References
“SCADA Systems – SCADA Systems.” Www.scadasystems.net, www.scadasystems.net/.

Alanazi, Manar, et al. “SCADA Vulnerabilities and Attacks: A Review of the State-of-The-Art and Open Issues.” Computers & Security, vol. 125, Nov. 2022, p. 103028, https://doi.org/10.1016/j.cose.2022.103028.