# A Methodological Approach to Securing Cyber-Physical Systems for Critical Infrastructures
## 5 Proposed Approaches and Solutions
### Instantiating the Monitoring Component
#### 5.1.1 Mobile Control Panel  
Usually, an MCP is used to manage and synchronize various machines' movements in the factory. For ensuring efficient coordination between different equipment, such as robotic arms, and assembly line components, they usually include some specific components such as the following (see the left-bottom square in Figure 3):  
* _Control Interface_: It allows us to monitor and control the motion of machines. This interface includes hardware components such as touchscreens, buttons, and software for user-friendly usage and visualization.
* _PLC (Programmable Logic Controller)_: It is the component that executes programmed instructions based on input signals and predefined logic.
* _Motion Controllers_: They translate commands from the PLC into precise movements for the connected machines; therefore, they are responsible for regulating speed, acceleration, and deceleration to ensure smooth operation.
* _Sensors_: Different sensors (such as proximity sensors, encoders, and vision systems) are used to monitor the system or enable (reaction) activity, such as to adjust machine movements. Sometimes, a _sensor gateway_ can aggregate or transmit data from multiple sensors, acting as a bridge between sensors and the broader network infrastructure.
* _Communication Protocols_: Specific communication protocols can be used to exchange data with other machines or systems. Sometimes, a _Message Broker_ can simplify communication or ensure reliable and scalable message delivery across heterogeneous systems.  
Even if MCPs usually include mechanisms for anomalies or error detection and corrective action execution, they are susceptible to cybersecurity vulnerabilities, such as the following:  
* _Lack of Authentication and Authorization_: Weaknesses in access control systems could provide unwanted users access to critical features. Attackers could be able to take over the machinery in the absence of adequate identification and authorization procedures, which might cause production interruptions or safety risks.
* _Insecure Communication Protocols_: Without proper encryption or authentication, the communication protocols or Message Broker can open the path to illegal command injection, data manipulation, and eavesdropping by network-acquired attackers.
* _Insufficient Firmware Security_: Firmware vulnerabilities or backdoors could be exploited to gain unauthorized access to the panel's functionalities and compromise the entire safety of the system.  
* _Lack of Security Updates_: Regular security updates or patches are the most effective way to avoid system vulnerability and malware attacks.
* _Physical Access_: If not controlled, physical access can bypass security controls or directly manipulate the control panel to disrupt production or cause damage.
* _Inadequate Network Segmentation_: A breach in one part of the networks could potentially compromise the control panels and vice versa.
* _Supply Chain Risks_: Supply chain attacks can introduce malware, backdoors, or other security vulnerabilities into the manufacturing environment, compromising integrity and security.
* _Human Factors_: Insider threats or unintentional actions by employees, such as negligent handling of credentials, failure to follow security protocols, or falling victim to social engineering attacks, can also be exposed to cybersecurity risks.
* _Legacy Systems_: Outdated or unsupported software, making them more susceptible to exploitation due to the lack of security updates and patches.
* _Lack of Security Awareness_: Insufficient training and awareness regarding the best practices of cybersecurity can lead to inadvertent actions compromising the security of motion control panels.