Paper Info
Title
Examining Cybersecurity of Cyberphysical Systems for Critical Infrastructures Through Work Domain Analysis.
Abstract
Objective: The aim of this study was to apply work domain analysis for cybersecurity assessment and design of supervisory control and data acquisition (SCADA) systems. Background: Adoption of information and communication technology in cyberphysical systems (CPSs) for critical infrastructures enables automated and distributed control but introduces cybersecurity risk. Many CPSs employ SCADA industrial control systems that have become the target of cyberattacks, which inflict physical damage without use of force. Given that absolute security is not feasible for complex systems, cyberintrusions that introduce unanticipated events will occur; a proper response will in turn require human adaptive ability. Therefore, analysis techniques that can support security assessment and human factors engineering are invaluable for defending CPSs. Method: We conducted work domain analysis using the abstraction hierarchy (AH) to model a generic SCADA implementation to identify the functional structures and means-ends relations. We then adopted a case study approach examining the Stuxnet cyberattack by developing and integrating AHs for the uranium enrichment process, SCADA implementation, and malware to investigate the interactions between the three aspects of cybersecurity in CPSs. Results: The AHs for modeling a generic SCADA implementation and studying the Stuxnet cyberattack are useful for mapping attack vectors, identifying deficiencies in security processes and features, and evaluating proposed security solutions with respect to system objectives. Conclusion: Work domain analysis is an effective analytical method for studying cybersecurity of CPSs for critical infrastructures in a psychologically relevant manner. Application: Work domain analysis should be applied to assess cybersecurity risk and inform engineering and user interface design.
Year
DOI
Venue
2018
10.1177/0018720818769250
HUMAN FACTORS
Keywords
Field
DocType
cybersecurity,cyberphysical system,work domain analysis,supervisory control,cognitive work analysis,ecological approaches,system analysis
Supervisory control,Computer security,Cognitive work analysis,Cyberphysical systems,SCADA,Engineering,Work domain analysis
Journal
Volume
Issue
ISSN
60.0
5.0
0018-7208
Citations 
PageRank 
References 
0
0.34
28
Authors
3
Name
Order
Citations
PageRank
Hao Wang1440127.79
Nathan Lau201.01
Ryan M. Gerdes34112.72