Identifying SCADA systems and their vulnerabilities on the internet of things: A text-mining approach

Sagar Samtani; Shuo Yu; Hongyi Zhu; Mark Patton; John Matherly; Hsinchun Chen

doi:10.1109/MIS.2018.111145022

Identifying SCADA systems and their vulnerabilities on the internet of things: A text-mining approach

Sagar Samtani, Shuo Yu, Hongyi Zhu, Mark Patton, John Matherly, Hsinchun Chen

Research output: Contribution to journal › Article › peer-review

31 Scopus citations

Abstract

Supervisory Control and Data Acquisition (SCADA) systems allow operators to control critical infrastructure. Vendors are increasingly integrating Internet technology into these devices, making them more susceptible to cyberattacks. Identifying and assessing vulnerabilities of SCADA devices using Shodan, a search engine that contains records about publicly available Internet-connected devices, can help mitigate cyberattacks. The authors present a principled approach to systematically identify all SCADA devices on Shodan and then assess the vulnerabilities of the devices with a state-of-the-art tool.

Original language	English (US)
Pages (from-to)	63-73
Number of pages	11
Journal	IEEE Intelligent Systems
Volume	33
Issue number	2
DOIs	https://doi.org/10.1109/MIS.2018.111145022
State	Published - Mar 1 2018

Keywords

Internet of Things
Nessus
SCADA
SCADA devices
Shodan
cyberattacks
cybersecurity
data mining
security
supervisory control and data acquisition
text mining
vulnerability assessment

ASJC Scopus subject areas

Computer Networks and Communications
Artificial Intelligence

Access to Document

10.1109/MIS.2018.111145022

Cite this

@article{9e75821dc54f443498174efc3de9a477,

title = "Identifying SCADA systems and their vulnerabilities on the internet of things: A text-mining approach",

abstract = "Supervisory Control and Data Acquisition (SCADA) systems allow operators to control critical infrastructure. Vendors are increasingly integrating Internet technology into these devices, making them more susceptible to cyberattacks. Identifying and assessing vulnerabilities of SCADA devices using Shodan, a search engine that contains records about publicly available Internet-connected devices, can help mitigate cyberattacks. The authors present a principled approach to systematically identify all SCADA devices on Shodan and then assess the vulnerabilities of the devices with a state-of-the-art tool.",

keywords = "Internet of Things, Nessus, SCADA, SCADA devices, Shodan, cyberattacks, cybersecurity, data mining, security, supervisory control and data acquisition, text mining, vulnerability assessment",

author = "Sagar Samtani and Shuo Yu and Hongyi Zhu and Mark Patton and John Matherly and Hsinchun Chen",

note = "Publisher Copyright: {\textcopyright} 2018 IEEE.",

year = "2018",

month = mar,

day = "1",

doi = "10.1109/MIS.2018.111145022",

language = "English (US)",

volume = "33",

pages = "63--73",

journal = "IEEE Intelligent Systems",

issn = "1541-1672",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "2",

}

TY - JOUR

T1 - Identifying SCADA systems and their vulnerabilities on the internet of things

T2 - A text-mining approach

AU - Samtani, Sagar

AU - Yu, Shuo

AU - Zhu, Hongyi

AU - Patton, Mark

AU - Matherly, John

AU - Chen, Hsinchun

PY - 2018/3/1

Y1 - 2018/3/1

N2 - Supervisory Control and Data Acquisition (SCADA) systems allow operators to control critical infrastructure. Vendors are increasingly integrating Internet technology into these devices, making them more susceptible to cyberattacks. Identifying and assessing vulnerabilities of SCADA devices using Shodan, a search engine that contains records about publicly available Internet-connected devices, can help mitigate cyberattacks. The authors present a principled approach to systematically identify all SCADA devices on Shodan and then assess the vulnerabilities of the devices with a state-of-the-art tool.

AB - Supervisory Control and Data Acquisition (SCADA) systems allow operators to control critical infrastructure. Vendors are increasingly integrating Internet technology into these devices, making them more susceptible to cyberattacks. Identifying and assessing vulnerabilities of SCADA devices using Shodan, a search engine that contains records about publicly available Internet-connected devices, can help mitigate cyberattacks. The authors present a principled approach to systematically identify all SCADA devices on Shodan and then assess the vulnerabilities of the devices with a state-of-the-art tool.

KW - Internet of Things

KW - Nessus

KW - SCADA

KW - SCADA devices

KW - Shodan

KW - cyberattacks

KW - cybersecurity

KW - data mining

KW - security

KW - supervisory control and data acquisition

KW - text mining

KW - vulnerability assessment

UR - http://www.scopus.com/inward/record.url?scp=85041185663&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85041185663&partnerID=8YFLogxK

U2 - 10.1109/MIS.2018.111145022

DO - 10.1109/MIS.2018.111145022

M3 - Article

AN - SCOPUS:85041185663

SN - 1541-1672

VL - 33

SP - 63

EP - 73

JO - IEEE Intelligent Systems

JF - IEEE Intelligent Systems

IS - 2

ER -

Identifying SCADA systems and their vulnerabilities on the internet of things: A text-mining approach

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this