Write-Up #2: SCADA System

In this write-up you will use the SCADA SystemsLinks to an external site. article, along with your own research, to explain the vulnerabilities associated with critical infrastructure systems and the role SCADA applications play in mitigating these risks.

SCADA systems are industrial control systems (ICS) that provide supervisory levels for controlling critical infrastructure systems, including power plants, water treatment facilities, and transportation networks. These systems are often complex and interconnected, making them vulnerable to cyber-attacks that could disrupt service or cause physical damage. This write-up will summarize the article and explain the vulnerabilities associated with critical infrastructure systems and SCADA applications’ role in mitigating these risks.
SCADA, or Supervisory Control and Data Acquisition, is a crucial industrial control system for managing and monitoring infrastructure, buildings, and industrial processes. It comprises operator apparatus, supervisory systems, RTUs, PLCs, and communication infrastructure. SCADA systems operate in real-time, utilizing tag databases containing data elements known as points or tags. They employ HMIs to present processed data to human operators through mimic diagrams. With simple logic procedural and function block programming languages like ladder logic, engineers can design and implement programs that execute on PLCs or RTUs within SCADA systems. Additionally, some SCADA systems feature integrated HMI/SCADA systems using non-proprietary and open communication protocols.

Vulnerabilities with Critical Infrastructure System
Numerous vulnerabilities can impact Critical Infrastructure Systems such as the power grid. The following are some of the most prevalent examples of vulnerabilities:
1. Unauthorized access. Due to their complexity and frequent reliance on legacy programming languages (such as C or Pascal), hackers have been able to compromise the networks connected to Critical Infrastructure Systems and manipulate them using remote access.
2. Legacy systems with outdated security protocols. Critical Infrastructure Systems often rely on obsolete hardware and software without security patches for recent vulnerabilities, which can be a vector for attack (“Nucleus Command,” 2020).
3. Human error and social engineering. Critical Infrastructure Systems rely on human operators for maintenance and configuration. Misconfiguration errors can introduce security vulnerabilities. Social engineering (such as phishing attacks) can also cause a human operator to provide authentication credentials to an attacker or execute code with malicious intent (“Computer Weekly,” 2018).
4. Distributed Denial of Service (DDoS) attacks. Since critical infrastructure systems may not have sufficient monitoring and network controls, an attacker can flood the system with illegitimate network traffic until it can no longer function normally, causing a system failure and denying service to authorized users (“Forbes,” 2022).

The role the SCADA system plays in reducing these risks

Many of the vulnerabilities above can be mitigated by modern SCADA systems with the
following features:
1. Modern SCADA systems employ strong identity and authentication protocols, including Multi-Factor Authentication (MFA) and privileged access management. These protocols could prevent unauthorized access and access using admin privileges (“god” level access, which would be more harmful to systems) (“Team UIS,” 2023).
2. Use SCADA systems with updated hardware and software to support modern security protocols.
3. SCADA system operators should also undergo security awareness training regularly to reduce human error and social engineering.
4. Real-time monitoring and alerting of networks and systems for suspicious activity, such as unexpected changes or access. This could also detect DoS attacks and redirect illegitimate traffic to mitigate against system failures.

Conclusion
In conclusion, safeguarding Critical Infrastructure Systems such as the power grid from potential vulnerabilities is paramount for ensuring the stability and reliability of essential services. Addressing unauthorized access, outdated systems, human error, and DDoS attacks requires a multifaceted approach. Modern SCADA systems offer a robust framework for mitigating these risks through enhanced authentication measures, regular updates, operator training, and real-time monitoring capabilities. By implementing these strategies, organizations can bolster the resilience of their critical infrastructure, minimizing the likelihood of successful attacks and ensuring uninterrupted operation in the face of evolving cybersecurity threats.

References
1. Nucleus Command Systems (2020). SCADA Security: What Makes SCADA Networks More Vulnerable to Cyber-Attacks? Retrieved from https://nucleuscommand.com/2020/08/20/scada-security/
2. Computer Weekly (2018). Social engineering at the heart of critical infrastructure attack. Retrieved from https://www.computerweekly.com/news/252454369/Social-engineering- at-the-heart-of-critical-infrastructure-attack
3. Forbes (2022). Focus On DDoS Protection of Critical Infrastructure as CISA Requires Deeper Cyberattack Visibility. Retrieved from https://www.forbes.com/sites/forbestechcouncil/2022/07/08/focus-on-ddos-protection-of- critical-infrastructure-as-cisa-requires-deeper-cyberattack-visibility/?sh=714654714b6b
4. Team UIS (2023). Multi-Factor Authentication for SCADA. Retrieved from https://teamuis.com/2023/08/21/multi-factor-authentication-for-scada/ .