Security for Critical Infrastructure SCADA Systems

This paper provides a non-technical overview of critical infrastructure Supervisory Control and Data Acquisition (SCADA) security. It gives a background on SCADA systems and the history of critical infrastructure concern. The SCADA security threats, incidents and vulnerabilities are examined along with issues that impede security advances. Finally the broad range of security initiatives is discussed and observations and recommendations are made. Supervisory Control and Data Acquisition Systems Supervisory Control and Data Acquisition (SCADA) systems provide automated control and remote human monitoring of real world processes. SCADA systems can be used to improve quality and efficiencies in processes such as beer brewing and snow making for ski resorts, but are traditionally used by utilities and industries in the areas of oil and natural gas, electric power, rail transportation, water and wastewater. [It is estimated that there are 3 million SCADA systems in use.] SCADA systems provide near real time monitoring and control with time delays ranging between fractions of seconds to minutes. Depending on the size and sophistication, SCADA systems can cost from tens of thousands of dollars to tens of millions of dollars.