Comprehensive Conceptual Model of Control System's Vulnerabilities

Although the use of computer and information technology in Industrial Control Systems (ICSs) has enhanced their quality, performance and reliability, it has exposed them to cyber security issues. On the other hand, each ICS has a layered structure owing to its variety of functions. Hence, ICSs are susceptible to a wide array of vulnerabilities. Vulnerability detection is an essential step in securing ICSs. After that, different countermeasures should be applied to mitigate the vulnerabilities. However, there exists the lack of a suitable classification of ICS security related vulnerabilities. To address the issue, this paper presents a comprehensive conceptual model for ICS's vulnerabilities based on available vulnerability classification in security standards and guidelines and layered structure of ICS. AS a result, optimal security controls can be applied to reduce or eliminate the vulnerabilities via the conceptual model. Consequently, the proposed conceptual model can help to identify ICS's vulnerabilities and entry points of ICS and cyber attacks can be prevented as far as possible.