inis 16(7): e3

Research Article

Attribution of Cyber Attacks on Industrial Control Systems

Download1441 downloads
  • @ARTICLE{10.4108/eai.21-4-2016.151158,
        author={Allan Cook and Andrew Nicholson and Helge Janicke and Leandros Maglaras and Richard Smith},
        title={Attribution of Cyber Attacks on Industrial Control Systems},
        journal={EAI Endorsed Transactions on Industrial Networks and Intelligent Systems},
        keywords={attribution, scada, industrial control systems, survey, cyber attacks},
  • Allan Cook
    Andrew Nicholson
    Helge Janicke
    Leandros Maglaras
    Richard Smith
    Year: 2016
    Attribution of Cyber Attacks on Industrial Control Systems
    DOI: 10.4108/eai.21-4-2016.151158
Allan Cook1, Andrew Nicholson2, Helge Janicke1, Leandros Maglaras1,*, Richard Smith1
  • 1: Cyber Security Centre, De Montfort University, Leicester, LE1 9BH, UK
  • 2: Cyber Security Centre, WMG, University of Warwick, Coventry CV4 7AL, UK
*Contact email:


In order to deter or prosecute for cyber attacks on industrial control systems it is necessary to assign attribution to the attacker and define the type of attack so that international law enforcement agencies or national governments can decide on appropriate recourse. In this paper we identify the current state of the art of attribution in industrial control systems. We highlight the critical differences between attribution in enterprise networks and attribution in industrial networks. In doing so we provide a roadmap for future research.