Automated Security Analysis for Industrial Control Systems based on MITRE ATT&CK and IEC 62443

Vogl, JonasJonasVogl2024-11-202024-11-202024https://publica.fraunhofer.de/handle/publica/479112In this article a lightweight approach to automatically analyze the architecture of Industrial Control Systems (ICS) for cybersecurity issues is presented. The goal is to support network architects and administrators with identifying security weaknesses in their network architecture and help them find efficient solutions. For this a mapping between the attacker focused MITRE ATT&CK Framework [9] and the defense oriented IEC 62443 standard [5] is created. This mapping is then used to estimate for which attack techniques defenses are already in place or have to be improved.enAutomated Security Analysis for Industrial Control Systems based on MITRE ATT&CK and IEC 62443conference paper