What question did this study set out to answer?

The central aim is to create a method for automatically analyzing ICS architectures for cybersecurity vulnerabilities.

February 25, 2026Open Access

Automated Security Analysis for Industrial Control Systems based on MITRE ATT&CK and IEC 62443

Key Points

The central aim is to create a method for automatically analyzing ICS architectures for cybersecurity vulnerabilities.
Develop a lightweight approach for security analysis
Map MITRE ATT&CK Framework to IEC 62443 standard
Identify existing and needed defenses against attack techniques
Facilitated identification of security weaknesses in ICS architecture
Provided a framework to assess current defenses
Highlighted areas needing improvement in cyber defenses

Abstract

In this article a lightweight approach to automatically analyze the architecture of Industrial Control Systems (ICS) for cybersecurity issues is presented. The goal is to support network architects and administrators with identifying security weaknesses in their network architecture and help them find efficient solutions. For this a mapping between the attacker focused MITRE ATT&CK Framework 9 and the defense oriented IEC 62443 standard 5 is created. This mapping is then used to estimate for which attack techniques defenses are already in place or have to be improved.

Mark Helpful

Bookmark

Relay

View Full Paper