TY - JOUR T1 - A Study on Security Vulnerabilities Assessment and Quantification in SCADA Systems AU - Firdaus, Zakuan AU - Jamil, Norziana AU - Saif Qassim, Qais AU - Ezanee Rusli, Mohd AU - Ja`affar, Norhamadi AU - Daud, Maslina AU - Hasan, HafizahChe JO - Journal of Engineering and Applied Sciences VL - 13 IS - 6 SP - 1338 EP - 1346 PY - 2018 DA - 2001/08/19 SN - 1816-949x DO - jeasci.2018.1338.1346 UR - https://makhillpublications.co/view-article.php?doi=jeasci.2018.1338.1346 KW - SCADA KW -vulnerability assessment KW -risk assessment KW -vulnerability severity KW -attack consequences KW -protect AB - Supervisory Control And Data Acquisition Systems (SCADA) monitor and control industrial and critical infrastructure functions such as electricity, oil, water and natural gas production and distribution processes. Consequently, failure in the intended operation of SCADA system results in catastrophic consequences. With the increased interconnectivity of SCADA systems and the commercial availability of cloud computing, SCADA systems have increasingly adopted Internet of Things (IoT) technologies to significantly reduce infrastructure costs and increase ease of maintenance and integration. As a result, the exposure of these systems to cyber threats has increased enormously. Therefore, there is a necessity to identify, remediate and mitigate system’s security vulnerabilities to protect and prevent possible attacks. This study serves two folds; firstly, different types of vulnerabilities in SCADA systems have been identified and reviewed. Secondly, two test cases have been presented to demonstrate the severity of the identified vulnerabilities on SCADA systems. This study draws attention to the impact of threat on SCADA systems and their consequences. ER -