Integrating Security into Industrial Control System Architecture Based on IEC 42010

Industrial Control Systems (ICS) are increasingly becoming targets for cybercriminals seeking ransom or aiming to cause disruptive chaos because of the potentially devastating impact of ICS malfunction. Following the security-by-design principle, security measures should be integrated into ICS system design as early as possible. System architecture design is one of the earliest activities in the system development life cycle that can play a key role in enhancing security. Hence, this paper proposes an architectural security framework based on IEC 42010, a standard for system architecture description, aiming at integrating security into system architecture. As part of this framework, an ontology is designed to formalize the system architecture described in SysML v2 (Systems Modelling Language version 2) to facilitate automatic reasoning about system design against specified security requirements and rules. To this end, the transformation rules from the textual notation of SysML v2 to OWL (Web Ontology Language) are specified. A use case is presented and analyzed that demonstrates the practicality of the proposed approach in adding security to the system architecture.