An Analytical Framework for Evaluating Survivability of SCADA Systems

Supervisory Control and Data Acquisition (SCADA) systems control and monitor industrial and critical infrastructure functions, such as electricity, gas, water, waste, railway and traffic. Recently, SCADA systems have been targeted by an increasing number of attacks from the Internet due to its grow- ing connectivity to Enterprise networks. Traditional techniques and models of identifying attacks, and quantifying its impact cannot be directly applied to SCADA systems because of their limited resources and real-time operating characteristics. This paper introduces a novel framework for evaluating survivability of SCADA systems from a service-oriented perspective. The proposed framework uses an analytical model to evaluate the status of services and the survivability of the overall system using queuing theory and Bayesian networks. Preliminary results are shown and some improvements on the model are identified.