Vulnerability Assessment of Industrial Control Systems for Colonial Pipeline and WannaCry Ransomware

Industrial control systems (ICS) allow a high level of automation of industrial processes, which, in its turn, results in their higher efficiency and lower cost [1]. ICS are core components in many industrial setups, being used to automatically and manually control processes in the fields of manufacturing, energy, and utilities, among others. ICS environments are increasingly becoming susceptible to cyber-attacks as a result of the merging of operational technology (OT) with information technology (IT) [2]. This paper has addressed common vulnerabilities in ICS environments, which range from unsecure communication protocols, weak authentication mechanisms, outdated software, and improper network configurations. Through the exploitation of such vulnerabilities, malicious attackers are able to obtain unauthorized access, disrupt operations, or cause much damage on physical infrastructure. In an attempt to minimize such risks, this paper has set out some of the mitigation efforts that span from the adoption of network segmentation, robust mechanisms of authentication and encryption, regular updating and patching of systems, and total maintenance and around-the-clock monitoring and vulnerability assessments. Such measures are of greatest necessity in improving the security posture of ICS environments as well as securing core industrial processes.