Siber Fiziksel Sistemler ve Güvenlik Sorunları

Abstract

Genel olarak, siber fiziksel sistemler, bilgi işlemi fiziksel dünyaya entegre eden sistemlerdir. Kontrol sistemleri, bilgi sistem ağları ile kesişimlerinin artması ve iletişim yöntemlerinin çeşitliliği siber fiziksel sistem güvenliğindeki tehdit vektörlerinin değişmesine ve artmasına neden olmaktadır. Bu, geleneksel bilgi sistem güvenlik önlemlerinin, yeni nesil bilgi sistem güvenlik çözümlerinin veya kontrol sistemlerine özgü güvenlik çözümlerinin tek başına yetersiz kalacağını ve siber fiziksel sistem ağındaki tüm bileşenleri içeren ve operasyonel senaryolar içeren entegre güvenlik çözümlerine duyulan ihtiyaç artmaktadır. Bu çalışmada, siber fiziksel sistemlerin birkaç tanımı ele alınmış ve siber fiziksel sistemlere ne olduklarına, nerede bulunduklarına ve nasıl kullanıldıklarına genel bir bakış ortaya konulmuştur. Ayrıca, siber fiziksel sistemlerin daha fazla güvenlik talepleri sunduğunun belirli nedenleriyle ilgili bilgiler sunulmuştur. Risklerin daha yüksek, bileşenlerin bakımı ve güncellenmesi çok daha zor ve sistemlerin daha karmaşık olduğu ortadadır. Amaç, potansiyel saldırılara karşı koymak için etkili güvenlik önlemleri tasarlanması adına bu sistemleri yeterince iyi anlamaktır.

Keywords

• Saldırılar
• Siber-fiziksel sistemler
• Güvenlik

Cyber-Physical Systems and their Security Issues

Abstract

Broadly, cyber physical systems are systems that integrate computing into the physical world. Control systems, the increase in their intersection with information technology networks and the variety of communication methods also cause the threat vectors in cyber physical systems security to change and increase. This shows that traditional information technology security measures, new generation information technology security solutions or security solutions specific to control systems will be insufficient alone, and the need for integrated security solutions that include all components in the cyber physical systems network and include operational scenarios. In this work, it was cover a couple of definitions of cyber physical systems and it was present an overview of cyber physical systems, what they are, where they are found, and how they are used. It also includes some information on the specific reasons cyber physical systems present greater security demands. The stakes are higher, the components are much more difficult to maintain and update, and the systems are more complex. The goal is to understand these systems well enough to design effective security measures to counter potential attacks.

Keywords

• Attacks
• Cyber-physical systems
• Security

References

1. Knapp, E. D., & Langill, J. T. (2021). Industrial Network Security: Securing critical infrastructure networks for smart grid, SCADA, and other Industrial Control Systems. Syngress. (2nd Edition).
2. Knapp, E. D., & Samani, R. (2013). Applied cyber security and the smart grid: implementing security controls into the modern power infrastructure. Newnes.
3. Broo, D. G., Boman, U., & Törngren, M. (2021). Cyber-physical systems research and education in 2030: Scenarios and strategies. Journal of Industrial Information Integration, 21, 100192.
4. Cardenas, A., Amin, S., Sinopoli, B., Giani, A., Perrig, A., & Sastry, S. (2009, July). Challenges for securing cyber physical systems. Future directions in cyber-physical systems security. 5(1), 1-7.
5. Gao, W., & Morris, T. H. (2014). On cyber attacks and signature based intrusion detection for modbus based industrial control systems. Journal of Digital Forensics, Security and Law, 9(1), 3.
6. Gunes, V., Peter, S., Givargis, T., & Vahid, F. (2014). A survey on concepts, applications, and challenges in cyber-physical systems. KSII Transactions on Internet & Information Systems, 8(12), 4242-4268.
7. Haque, S. A., Aziz, S. M., & Rahman, M. (2014). Review of cyber-physical system in healthcare. International journal of distributed sensor networks, 10(4), 217415, 1-20.
8. Humayed, A., Lin, J., Li, F., & Luo, B. (2017). Cyber-physical systems security—A survey. IEEE Internet of Things Journal, 4(6), 1802-1831.

9. Jones, A., Subrahmanian, E., Hamins, A., & Grant, C. (2015). Humans' critical role in smart systems: A smart firefighting example. IEEE Internet Computing, 19(3), 28-31.
10. Latimer, K. (2020). The Art of Care: A Report on the 2019 Vizient Connections Education Summit. American Journal of Medical Quality, 35(1_suppl), 5S-111S.
11. Lee, E. A. (2008, May). Cyber physical systems: Design challenges. 11th IEEE international symposium on object and component-oriented real-time distributed computing (ISORC) (pp. 363-369). IEEE.
12. Nunes, D. S., Zhang, P., & Silva, J. S. (2015). A survey on human-in-the-loop applications towards an internet of all. IEEE Communications Surveys & Tutorials, 17(2), 944-965.
13. Olowononi, F. O., Rawat, D. B., & Liu, C. (2020). Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS. IEEE Communications Surveys & Tutorials. 23(1), 524-552.
14. Pricop, E., Fattahi, J., Parashiv, N., Zamfir, F., & Ghayoula, E. (2017, April). Method for authentication of sensors connected on Modbus TCP. 4th International Conference on Control, Decision and Information Technologies (CoDIT) (pp. 0679-0683). IEEE.
15. Rajkumar, R., Lee, I., Sha, L., & Stankovic, J. (2010, June). Cyber-physical systems: the next computing revolution. In Design automation conference (pp. 731-736). IEEE.
16. Thoben, K. D., Wiesner, S., & Wuest, T. (2017). Industrie 4.0” and smart manufacturing-a review of research issues and application examples. International journal of automation technology, 11(1), 4-16.
17. Wan, J., Chen, M., Xia, F., Di, L., & Zhou, K. (2013). From machine-to-machine communications towards cyber-physical systems. Computer Science and Information Systems, 10(3), 1105-1128.
18. Yao, X., Zhou, J., Lin, Y., Li, Y., Yu, H., & Liu, Y. (2019). Smart manufacturing based on cyber-physical systems and beyond. Journal of Intelligent Manufacturing, 30(8), 2805-2817.
19. Cárdenas, A. A., Amin, S., Lin, Z. S., Huang, Y. L., Huang, C. Y., & Sastry, S. (2011, March). Attacks against process control systems: risk assessment, detection, and response. 6th ACM symposium on information, computer and communications security (pp. 355-366).
20. Lawrence, F. L., & Jokonya, O. (2020, November). Factors Affecting the Adoption of Smart Buildings at Universities. 2nd International Multidisciplinary Information Technology and Engineering Conference (IMITEC) (pp. 1-7). IEEE.