Risk assessment is a critical aspect of all businesses, and leaders are tasked with limiting risk to the lowest reasonable level within their systems. Industrial Control Systems (ICS) operate in a different cybersecurity risk environment than business systems due to the possibility of second and third-order effects when an attack occurs. We present a process for predicting when an adversary gains the ability to attack an industrial control system. We assist leaders in understanding how attackers are targeting ICS by providing visualizations and percentages that can be applied to updating infrastructure or shifting personnel responsibilities to counter the threat. This new process seeks to integrate defenders and threat intelligence providers, allowing defenders to proactively defend their networks prior to devastating attacks. We apply the process by observing it under randomness with constraints and through a case study of the 2015 attack on the Ukrainian power grid. We find that this process answers the question of what an attacker can do, provides the ability for the defender to possess an updated understanding of the threat’s capability, and can both increase and decrease the probability that an attacker has a capability against a control system. This process will allow leaders to provide strategic vision to the businesses and systems that they manage.

As a part of the revitalization of the supersonic wind tunnel maintained by the Aerospace Engineering Department of Mississippi State University, a new data acquisition and control system became incumbent. Previous data acquisition and control systems used in the operation of the supersonic wind tunnel made use of now outdated hardware and functioned with two central processing units; one processor was used for recording system response, while the other monitored and controlled the tunnel. A new system is required to provide adequate rapid real-time control, along with rapid acquisition of raw tunnel feedback or response data and tunnel pressure data all implemented on one computer processor. The data acquisition and control program that was developed provides synchronized data storage and control output commands, while providing the operator with all essential information and checklists required for running the tunnel. The program is a general user interface developed from previously implemented data acquisition and control systems to perform all predetermined tasks while minimizing operator front panel inputs. When the supersonic wind tunnel repair is completed, the compiled data acquisition and control program will be implemented in the operation of the tunnel. This paper details the development of the supersonic wind tunnel data acquisition and control system employed in the revitalization project. Without the information on the details of the data acquisition and control program, any future editing of the control system source codes will be a laborious task.

No description available.

No description available.

No description available.

No description available.

No description available.

No description available.

No description available.

No description available.