Cybersecurity
Abstract
This chapter describes fundamental concepts of security and cybersecurity within the context of Industrial Control Systems (ICSs) and Cyber–Physical Systems (CPSs) and their control subsystems. It identifies the fundamental properties of a cybersecure system and the design principles and techniques used to help ensure such properties. Many standards, processes, and techniques exist for minimizing the negative effects of cybersecurity events and breaches in order to reduce the consequences on the system or process being controlled. The chapter also describes the most common techniques and mechanisms used to achieve different aspects of the three fundamental security properties of confidentiality, integrity, and availability. It introduces secure design principles that must be carefully taken into consideration when designing, modifying, maintaining, and configuring a cyber-enabled ICS or CPS. The chapter overviews processes and techniques used for security management, risk assessment, threat mitigation, and incident detection and response.