Methodology for Assessing Information Security Risks for Industrial Automation and Control Systems

Abstract

The article discusses the effective use of information technology in the chemical industry. The relevance of this area stems from the necessity to enhance productivity and competitiveness of enterprises within the chemical industry through active integration of advanced digital solutions. Special emphasis is placed on advantages and specifics of modern information systems and software products: SCADA systems, corporate ERP platforms, specialized analytical tools for modeling and optimization of chemical processes. The article analyzes possible ways of integrating IT tools into production processes and discusses methods for assessing the economic feasibility and effectiveness of implementing such systems. The article provides examples of implementing projects for the automation of chemical production and describes real-life cases of implementing digital solutions that help reduce costs, improve product quality, and ensure safety at enterprises. There is a need for continuous education and retraining of chemical specialists who will have to master and effectively apply modern information technologies in their daily practice. Approaches to developing and enhancing professional competencies under conditions of transition towards digital methods of design, analysis, and management of chemical-technology enterprises are discussed in detail. The results of the methodology's testing will serve as an effective tool that translates the requirements of the regulatory framework into measurable indicators, allowing for informed decisions on managing information security risks

Please cite this article in English as:

Tyryshkin S.Yu., Sharlaev E.V. Methodology for assessing information security risks for industrial automation and control systems. Herald of the Bauman Moscow State Technical University, Series Instrument Engineering, 2026, no. 2 (155), pp. 107--127 (in Russ.). EDN: AOYHDJ

References

[1] Parshin R.G. New era of information security in industry: challenges, threats, solutions. Upravlenie kachestvom [Quality Management], 2024, no. 10, pp. 36--40 (in Russ.). DOI: https://doi.org/10.33920/pro-01-2410-06

[2] Melnikov N.M., Nikishkin A.V., Vetrova E.V., et al. Security systems with artificial intelligence strategically important infrastructural facilities. Informatizatsiya i svyaz [Informatization and Communication], 2023, no. 1, pp. 44--50 (in Russ.). DOI: https://doi.org/10.34219/2078-8320-2023-14-1-44-50

[3] Zhuravlev S.I., Sidak A.A., Kadomkin V.V., et al. Regulatory and methodological aspects of security monitoring of automated information systems in industry. Avtomatizatsiya v promyshlennosti, 2022, no. 10, pp. 44--50 (in Russ.). DOI: https://doi.org/10.25728/avtprom.2022.10.09

[4] Maliev D.A., Miskov D.V., Nazarenko M.A. Information security risk management in the electronics industry. Nelineynyy mir [Nonlinear World], 2022, vol. 20, no. 4, pp. 51--59 (in Russ.). DOI: https://doi.org/10.18127/j20700970-202204-05

[5] Sharlaev E.V., Tkachenko D.M. Research of approaches to control the security conditions of the software environment of automated systems and development of a methodology for an integrated approach to ensuring the security of the software environment and infrastructure of the organization. Naukosfera, 2022, no. 7-1, pp. 167--171 (in Russ.). EDN: DQXXTK

[6] Tiwari P.K., Pandey S.K., Meshach W.T., et al. Improved data security in cloud environment for test automation framework and access control for Industry 4.0. Wirel. Commun. Mob. Comput., 2022, art. 3242092. DOI: https://doi.org/10.1155/2022/3242092

[7] Vangala A., Das A.K, Kumar N., et al. Designing access control security protocol for Industry 4.0 using Blockchain-as-a-Service. Secur. Priv., 2024, vol. 7, no. 2, art. e362. DOI: https://doi.org/10.1002/spy2.362

[8] Tyryshkin S.Yu. Information security using neural network technologies. Mezhdunarodnyy zhurnal gumanitarnykh i estestvennykh nauk [International Journal of Humanities and Natural Sciences], 2025, no. 4-1, pp. 226--230 (in Russ.). DOI: https://doi.org/10.24412/2500-1000-2025-4-1-226-230

[9] Chernyshova T.V., Chernyshova E.A., Titkov A.A. Introduction of information technologies and automation in industry: problems and solutions. Sovremennaya nauka: aktualnye problemy teorii i praktiki. Ser. Estestvennye i tekhnicheskie nauki [Modern Science: Actual Problems of Theory and Practice. Ser. Natural and Technical Sciences], 2024, no. 3, pp. 130--134 (in Russ.). EDN: BQATUO

[10] Krasnov A.E., Chekanov I.R., Kozochkin I.D. Automation of management decision support in the field of information security based on expert systems technology. Informatizatsiya obrazovaniya i nauki [Informatization of Education and Science], 2023, no. 2, pp. 81--89 (in Russ.). EDN: TKLBEM

[11] Jiang Y., Wang B. Analysis on network information security protection technology of intelligent terminal power monitoring system of substation under the support of multimodal multimedia information. Adv. Multimed., 2023, art. 8607305. DOI: https://doi.org/10.1155/2023/8607305

[12] Egorov I.V., Shchavelev P.A. Information security incidents in industry: challenges and solutions. Perspektivnye tekhnologii dlya sistem bezopasnosti [Promising Technologies for Security Systems], 2023, no. 2, pp. 32--43 (in Russ.). EDN: OBLERC

[13] Stepanov E.V. Digital transformation of industrial enterprises based on intelligent solutions of the Industry 4.0 concept. Vestnik Samarskogo universiteta. Ekonomika i upravlenie [Vestnik of Samara University. Economics and Мanagement], 2022, vol. 13, no. 1, pp. 49--55 (in Russ.). DOI: https://doi.org/10.18287/2542-0461-2022-13-1-49-55

[14] He J., Sun Y. Information security countermeasures for big data platforms based on cloud computing. Mob. Inf. Syst., 2022, art. 3981775. DOI: https://doi.org/10.1155/2022/3981775

[15] Shubham J., Audumbar P.A., Manish S., et al. Adoption of blockchain technology for privacy and security in the context of Industry 4.0. Wirel. Commun. Mob. Comput., 2022, art. 4079781. DOI: https://doi.org/10.1155/2022/4079781

[16] Filyak P.Yu., Tyrin I.A., Pazhintsev D.A. Information security of cyber-physical systems. Informatsiya i bezopasnost [Information & Security], 2022, vol. 25, no. 3, pp. 433--452 (in Russ.). DOI: https://doi.org/10.36622/VSTU.2022.25.3.012

[17] Lampropoulos G., Siakas K. Enhancing and securing cyber-physical systems and Industry 4.0 through digital twins: a critical review. J. Softw. Evol. Proc., 2023, vol. 35, no. 7, art. e2494. DOI: https://doi.org/10.1002/smr.2494

[18] Sun H., Bai S. Enterprise information security management using internet of things combined with artificial intelligence technology. Comput. Intell. Neurosc., 2022, art. 7138515. DOI: https://doi.org/10.1155/2022/7138515

[19] Rebro I.V., Sharlaev E.V. Building a network intrusion detection system based on artificial immune systems and neural networks. Polzunovskiy almanakh, 2016, no. 2, pp. 145--147 (in Russ.). EDN: XHVZWL

[20] Ivanenko V.G., Ivanova N.D. Information security risk assessment of industrial control systems. Voprosy kiberbezopasnosti [Cybersecurity Issues], 2024, no. 1, pp. 116--123 (in Russ.). DOI: https://doi.org/10.21681/2311-3456-2024-1-116-123

[21] Komarov A.V. Information security in the SCADA. Zashchita informatsii. INSIDE, 2016, no. 2, pp. 50--53 (in Russ.). EDN: VSBKNL

[22] Tyryshkin S.Yu. Emulation of quantum computing processes for automated control systems on a classical PC. Sovremennaya nauka: aktualnye problemy teorii i praktiki. Ser. Estestvennye i tekhnicheskie nauki [Modern Science: Actual Problems of Theory and Practice. Ser. Natural and Technical Sciences], 2024, no. 12, pp. 130--134 (in Russ.).