Security Enhancement for SCADA Communication Protocols Using Augmented Vulnerability Trees

摘要

The security of supervisory control and data acquisition (SCADA) networks has been identified as a significant national security issue. In this paper, a new risk modeling tool, augmented vulnerability trees, and two new indices for quantifying the risk are presented. Using data from a SCADA system test-bed implemented at the University of Louisville as a case study, the use of these proposed vulnerability and risk assessment tools are illustrated. By comparing the indices for threat impact and vulnerability on SCADA communication protocols with, and without, security enhancements, risk and vulnerability are quantified for the system, and the improvement produced by the protocol security enhancements are demonstrated.