Improving the cyber resilience of industrial control systems

This paper proposes a resilience strategy for industrial control systems that employs an active defense technique to reduce, if not eliminate, the likelihood of a common cause failure induced by a cyber attack. The active defense implementation is compared with a traditional industrial control system resilience implementation using a semi-simulated wastewater treatment system that was exposed to cyber attacks. The results demonstrate that the active defense implementation is very effective in the aftermath of a cyber attack whereas the traditional resilience implementation gives rise to a system disruption.