ICS and SCADA Security
Industrial control systems supervise physical plant, and securing them means protecting integrity and availability of control, not just data.
What ICS and SCADA Are
Industrial control systems (ICS) is the umbrella term for the hardware and software that monitor and command physical processes. SCADA (supervisory control and data acquisition) is a common ICS pattern: a central supervisory layer gathers telemetry from distributed field devices and issues setpoints. Field devices include programmable logic controllers (PLCs), remote terminal units (RTUs), and intelligent sensors and actuators.
The Threat Landscape
ICS protocols such as Modbus, DNP3, and older fieldbus standards were designed for reliability on trusted wires, not for hostile networks. Many carry no authentication: any device that can reach a PLC can, in principle, command it. Attacks of record have altered setpoints, spoofed operator displays to hide the true process state, and manipulated safety logic. Because the payoff is physical, ICS is a target for both criminals and state actors.
Distinctive Constraints
- Long service life and vendor-locked firmware limit patching
- Deterministic timing forbids heavy inline security processing
- Legacy protocols lack native authentication and encryption
- Physical consequences raise the stakes of any compromise
Securing ICS in Practice
Because you often cannot harden the endpoint, you harden the environment around it. Segment control networks from business networks. Whitelist the small, known set of communications a controller needs and drop everything else. Monitor the traffic for anomalies, since normal ICS traffic is highly repetitive and deviations stand out. Keep an independent safety system that cannot be overridden by the control network.
Fusion Context
A fusion plant's magnet power supplies, cryoplant, fueling, and vacuum systems are all ICS territory. The machine-protection system that trips a superconducting magnet before a quench damages it is safety-critical control. In the Hyperion breeder and burner designs, these systems are specified with independent safety instrumentation and defense-in-depth so that a compromise of the supervisory layer cannot defeat the last line of physical protection. The systems are simulated and designed, not yet built.