Compliance-Driven Cybersecurity Planning Based on Formalized Attack Patterns for Instrumentation and Control Systems of Nuclear Power Plants

Table 1

Attack pattern parameters for the instrumentation and control (I&C) system of a nuclear power plant (NPP).

Element		Items
Attack surface	EE	User(U), system(S), device(D)
	CH	Direct access (DA), direct wired (DW), wired network (WN), wireless network (LN)
	SRV	Application service (A), platform service (P), maintenance service (M)
M		Spoofing (S), tampering (T), repudiation (R), information disclosure (I), denial of service (D), escalation of privilege (E)
AT		EE, CH, SRV
RD		Nonoperational data (ND), operational data (OD), control data (CD), security and configuration data (SD)