SCADA stands for Supervisory Control and Data Aquisition. It essentially is a
collection of software that gathers info during an operation in real time and uses that for
industrial coordination. These systems are always present at most industries involving
some use of IT infrastructure; whether it’d be at a power plant, gasoline pipeline, water,
food processing or even payroll. The system functions like an overseer in real time
using RTUs and PLCs. As an example, public pools at local fitness centers require
setpoints to periodically pump chlorine and oxidants into the pool using PLCs. These
setpoints, however, can be changed by the operator using HMI or Human Machine
Interface. This lets an individual be able to view the information provided by the SCADA
systems and change whatever is needed as necessary.
Given that SCADA is a system designed to supervise other systems, these
systems are viable assets to protect and mitigate as much risk as possible which
SCADA provides ways in vulnerability mitigation. An article written by former ODU
student Paul Brown explains the architectural design of SCADA means high visibility
and freedom of supervisory control from just about anywhere. This means availability to
find vulnerabilities can happen easier and with better automated control than having to
physically search for the vulnerabilities at the system. There is essentially and different
freedom and feel to the use of an administrative tool on the SCADA control software
that auto controls and detects problems in its networks. With this ability, finding
vulnerabilities and making necessary changes is made less complex and less difficult.
Without the use of SCADA systems, trying to manage, adjust or able to monitor.
infrastructure would take more effort and human resources to manually do everything.
This also can be applied when trying to make security policies and mitigate risk which.
isn’t practical in a security standpoint.
Sources
pbrow010, P. by. (2020, December 6). Cyberpaul.
https://sites.wp.odu.edu/cyberpaul/2020/12/06/using-scada-to-protect-critical-
infrastructure-and-
systems/#:~:text=Monitoring%20and%20control%20of%20automated%20processes%2
0in%20the,physical%20location%20of%20the%20ICS%20component%20causing%20c
oncern.
Vargas, J., & Serrano, P. (2023, July 25). Protecting SCADA networks in an evolving threat
landscape. CDW.com.
https://www.cdw.com/content/cdw/en/articles/networking/protecting-scada-networks-in-
an-evolving-threat-landscape.html