Olajide, F. 2016. Developing a state of the art methodology & toolkit for ICS SCADA forensics. International Journal of Industrial Control Systems Security. 1 (2), pp. 44-56. https://doi.org/10.20533/ijicss.9781.9083.20346.2016.0005
| Title | Developing a state of the art methodology & toolkit for ICS SCADA forensics |
|---|---|
| Type | Journal article |
| Authors | Olajide, F. |
| Abstract | Supervisory Control and Data Acquisition (SCADA) systems are used in different Critical National Infrastructure (CNI), including Electric Power, Oil & Gas, Manufacturing, Utility, Transportation services and others. The underpinning control systems have unique characteristics such as being real-time and safety critical. Therefore interference and disruption of the services from cyber attack poses a significant risk to; the environment, properties, economies and human lives. Responding to such events in not trivial, and recovering the required forensic evidence to understand the cause and consequence of such an event is key. Further, developing a suitable incident response methodology to identify evidential artefacts of the causes of disruption is crucial, should security mechanisms fail. In this paper we present the state of the art methodology forensic toolkit for cyber incident response on Industrial Control System (ICS) environment of SCADA plus evaluate the applicability of current IT forensic tools and the requirements of an 'ICS forensic toolbag'. The research work presents an experimental case study of a malware USB device based attack, a man in the middle attack and a remote access attack. |
| Journal | International Journal of Industrial Control Systems Security |
| Journal citation | 1 (2), pp. 44-56 |
| Year | 2016 |
| Publisher | Infonomics Society |
| Publisher's version | File Access Level Controlled (open metadata, closed files) |
| Digital Object Identifier (DOI) | https://doi.org/10.20533/ijicss.9781.9083.20346.2016.0005 |
| Publication dates | |
| Published | 06 Dec 2016 |