Methods for assessing information security threats of automated process control systems

Chernov Denis Vladimirovich

In the modern world, industrial process automation technologies have found wide application. Automated process control systems (APCs) have become an important part of enterprises operating in various sectors of the economy and life support around the world. However, the high growth rates of the number of automation tools acutely raise the problem of ensuring the information security of automated process control systems from external and internal threats. In this paper, the author analyzes the methodology for assessing information security threats of the FSTEC of Russia and the international TRIKE methodology. The analysis of the methods is aimed at identifying common approaches to determining the sources of threats, tactics and techniques for assessing threats to information security, as well as identifying differences between them, in order to apply a unified approach to modeling threats to information security of automated control systems.

Keywords:automated control systems, information security, threat, threat assessment, threat model.