Next-Generation Access Control for Distributed Control Systems

Wired and wireless internetworking technologies are rapidly integrating, leaving distributed control systems (DCS) increasingly susceptible to cyberattacks. Access control frameworks can contain and mitigate the impact of cyberattacks, but existing solutions often leave holes that can undermine a plant's security. This article identifies key challenges in creating a complete, manageable access control framework for DCS and presents a model architecture that can ensure that each access is checked against policies that adhere to the least-privilege principle. The proposed architecture facilitates centralized, plant-wide policy management and protection of all connected field devices.