Practical Internet of Things Security - Second Edition

Example anatomy of a deadly cyber-physical attack

In the interest of demonstrating an attack tree scenario in the CPS domain of the IoT, this section highlights a hypothetical but devastating example of a cyber-physical attack in the transportation domain. No doubt, most readers are familiar with the Stuxnet worm that targeted the Iranian CPS responsible for refining uranium to fissionable levels. Stuxnet, while immensely damaging to Iranian goals, did not result in a safety failure. It resulted in an industrial control process failure that caused uranium refinement rates to come to a standstill. Unfortunately, Stuxnet—while most certainly nation state in origin—is only a prelude of things to come with regard to CPS attacks. Keep in mind, ...