Security Risk Analysis for Industrial Control Systems Malwares

Abstract

Industrial Control Systems (ICS) play a vital role in the operation and administration of critical infrastructures, such as power plants, industrial facilities, water treatment plants, and transportation networks. However, the growing number of targeted attacks with malware focused on these systems has generated significant concern over their security. This dissertation thoroughly investigates comprehensive risk analysis on ICS malware, addressing the gap between the technical details of these attacks and their broader implications for the reliability and security of critical infrastructures. This study comprehensively analyses notable examples of ICS malware, such as HermeticWiper, BlackEnergy, and Industroyer 2, by utilising a strategic combination of the MITRE ATT&CK, NIST SP 800-82, and CIS frameworks. The implementation of an integrated approach provides a proactive method for the recognition and reduction of security issues. This dissertation offers valuable insights into the strategies and techniques employed by cyber adversaries through an analysis of the behaviour and technical aspects of the attacks and security risk analysis. This dissertation highlights the need to thoroughly understand the risks associated with ICS malware through combined technical research and strategic risk assessment.