A Proposal for a Taxonomy for Vulnerabilities in Supervisory Control and Data Acquisition (SCADA) Systems

Abstract : To be useful a taxonomy must be unique, complete, and relational. Unique implies that each item should have one and only one place within the taxonomy. Complete means that everything should have a place in the taxonomy or that the taxonomy may be easily expanded to create a place for it. Relational means that similar items are grouped together in such a way as to allow us to make useful generalizations. This report will analyze existing taxonomies for uniqueness and completeness, and then propose a taxonomy for Supervisory Control and Data Acquisition and Industrial Control Systems that is unique, complete, and relational.