Usage Control for Industrial Control System

Cyber-Physical Systems (CPSs) is the key-pillar technology for the implementation of the Industry 4.0 concept. In the industrial sector, a physical entity with internet-enabled capabilities is an example of a CPS. Considering the criticality of the processes controlled by CPS, only authorized entities should have access to those systems under certain conditions. Existing access control approaches implemented in the industrial sector mainly rely on the roles that subjects may have to facilitate the separation of duty concept. However, context information and its mutability over time were out of the scope of implemented access control mechanisms. In this chapter, we investigate the application of the advanced access control paradigm to enable continuous control of Industrial Control Systems (ICS) usage according to context-aware security policies. We provide a framework description along with its implementation in a simulation environment. Finally, the obtained results regarding the system’s performance are outlined along with a discussion for potential improvement.