№2, 2020
ВОПРОСЫ БЕЗОПАСНОСТИ В ОБЛАЧНЫХ СИСТЕМАХ SCADA
В статье рассматриваются вопросы безопасности облачных систем SCADA (Supervisory Control and Data Acquisition), которые широко используются при мониторинге и управлении нефтегазовой отраслью. Поскольку традиционные системы SCADA очень дорогие, негибкие и трудно масштабируемые, возникают многочисленные проблемы, связанные со сбором, передачей и обработкой данных. Миграция системных приложений SCADA в облачную среду обеспечивает снижение затрат, повышение масштабируемости, эффективное управление системой, повышение надежности и решение проблем, связанных с ресурсами. В статье рассматриваются существующие уязвимости, которые могут препятствовать безопасности облачных систем SCADA. Реализация мер безопасности и оценки рисков в облачных системах SCADA является актуальной проблемой. В связи с этим анализируются проблемы безопасности и риски при использовании облачных систем SCADA и даются рекомендации по их решению в определенной степени (стр.3-12).
Ключевые слова: нефтегазовая отрасль, облачные системы SCADA, облачные вычисления, облачные сервисы, облачные модели, безопасность.
DOI : 10.25045/jpit.v11.i2.01
Литература
- Is Moving Your SCADA System to the Cloud Right For Your Company, Cloud-Based SCADA Systems: The Benefits & Risks, White Paper, 2011. https://www.controlglobal.com/
- Shahzad A., Musa S., Aborujilah A., Ismail M.N., Irfan M. Conceptual Model of Real Time Infrastructure Within Cloud Computing Environment // International Journal of Computer Networks, 2013, vol.5, issue 1, pp.18–24.
- Liu M., Yuan M., Wang F., Sun C. The Oil and Gas Pipeline Clouding SCADA System and Multiple Data Centers Storage System Design / International Conference on Manufacturing Construction and Energy Engineering, 2016, pp.293–297.
- Honeywell Process Solutions. Securing SCADA in the cloud, 2019. https://www.processonline.com.au/content/software-it/article/securing-scada-in-the-cloud-417777075
- Mrabet Z.E, Kaabouch N., Ghazi H.E., Ghazi H.E. Cyber-Security in Smart Grid: Survey and Challenges // Computers & Electrical Engineering, 2018, vol.67, pp.469–482.
- Soufiane S., Halima B. SaaS Cloud Security: Attacks and Proposed Solutions // Transactions on Machine Learning and Artificial Intelligence, 2017, vol.5, no.4, pp.291–301.
- Stojanović M.D., Boštjanĉiĉ Rakas S.V., Marković-PetroviC J.D. Scada systems ın the cloud and fog envıronments: mıgratıon scenarıos and securıty ıssues // Electronics and Energetics, 2019, vol.32, no.3, pp.345–358.
- Yosra B.D., Yacine D., Slim R., Noureddine B. A Novel Sensor Cloud Based SCADA infrastructure for Monitoring and Attack prevention / MoMM '16: Proceedings of the 14th International Conference on Advances in Mobile Computing and Multi Media, November 2016, pp.45–49. https://doi.org/10.1145/3007120.3007169
- Yadav G., Paul K. Archıtecture and Securıty of Scada Systems: a Revıew // 2020. https://arxiv.org/abs/2001.02925
- Baker T., Mackay M., Shaheed A., Aldawsari B. Security-oriented cloud platform for SOA-based SCADA / 15th IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing May 2015, pp.961–970.
- HyungJun K. Security and Vulnerability of SCADA Systems over IP-Based Wireless Sensor Networks // International Journal of Distributed Sensor Networks, 2012, doi:10.1155/2012/268478
- Zakuan F., Norziana J., Qais S.Q., Mohd E.R., Norhamadi J., Maslina D., HafizahChe H. A Study on Security Vulnerabilities Assessment and Quantification in SCADA // Journal of Engineering and Applied Sciences, 2018, vol.13, no.6, pp.1338–1346.
- Fataliyev T.Kh., Mehdiyev Sh.A. Analysis and New Approaches to the Solution of Problems of Operation of Oil and Gas Complex as Cyber-Physical System // International Journal of Information Technology and Computer Science, vol.10, no.11, 2018, pp.67–76.
- Zhifeng Y., Fei H., Xuehui F., Qi F., Zhen C., Yidan Z. Cloud Computing and Big Data for Oil and Gas Industry Application China // Journal of Computers, 2019, vol.14, no.4, pp.268–
- Keith S., Joe F., Karen K. Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems // National Institute of Standards and Technology Special Publication 800-82, 164 p.
- Slay J., Miller M. A Security Architecture for SCADA Networks / 17th Australasian Conference on Information Systems, 2006.
- Liu , Yuan M., Li G. Design Private Cloud of Oil and Gas SCADA System // EAI Endorsed Transactions on Scalable Information Systems, 2014, vol.1, issue 3, pp.1–5.
- Alguliyev R., Alekperov R. Cloud Computing: Modern State, Problems and Prospects // Telecommunications and Radio Engineering, 2013, vol.73, no.3. pp.255-266.
- Diaby T., Rad B.B. Cloud Computing: A review of the Concepts and Deployment Models // International Journal of Information Technology and Computer Science, 2017, 9, no.6, pp.50–58.
- Zhang Q., Cheng L., Boutaba R. Cloud computing: state-of-the-art and research challenges // Journal of Internet Services and Applications, 2010, vol.1, pp.7–18.
- Ələkbərov R.Q., Həşimov M.A. Bulud texnologiyaları: xidmətlər, problemlər və tətbiq sahələri // İnformasiya texnologiyaları problemləri, 2016, №1, s.3–10.
- Combs L. Cloud Computing for SCADA, moving all or part of SCADA applications to the cloud can cut costs, significantly while dramatically increasing reliability and scalability. http://www.indusoft.com/Documentation/White-Papers/ArtMID/1198/ArticleID/430/Cloud-Computing-for-SCADA
- Tomáš L., Iveta Z. Improvement of Human-Plant Interactivity via Industrial Cloud-Based Supervisory Control and Data Acquisition System. / International Conference on Advances in Production Management Systems (APMS), 2014, pp.83–90.
- Sajid A., Abbas H., Saleem K. Cloud-Assisted IoT-Based SCADA Systems Security: A Review of the State of the Art and Future Challenges //IEEE Access, 2016, vol.4, 1375–1385.
- Piggin R.S.H. Securing scada in the cloud: managing the risks to avoid the perfect storm / IET & ISA 60th International Instrumentation Symposium, 2014.
- Kyle W. SCADA in the Cloud A Security Conundrum? Trend Micro Incorporated Research Paper 2013, https://blog.trendmicro.com/trendlabs-security-intelligence/scada-in-the-cloud-a-security-conundrum/
- Wang Y. sSCADA: Securing SCADA infrastructure communications // International Journal of Communication Networks and Distributed Systems, 2012, vol.6, no.1, pp.59–78.
- Patrıck D.H. A security checklist for SCADA systems in the cloud, https://gcn.com/articles/2015/06/29/scada-cloud.aspx
- John D. F., Andres E. F. SCADA systems: vulnerabilities and remediation // Journal of Computing Sciences in Colleges, 2005, vol.20, no.4, pp.160–168.
