Cyber-Attacks to Industrial Control Systems since Stuxnet: A Systematic Review

The purpose of this qualitative exploratory study was to use a systematical and chronological methodology to examine the evolution of ICS cyber-attacks starting with Stuxnet in August 2009 through May 2021 and the evolution of SCADA/ICSs.

The significance of the study focused on ICS cybersecurity issues reported by leading ICS and cybersecurity experts and governmental agencies. The research questions provided the guideline for the study, including a description of the theoretical framework, followed 3 by the scope of the study.

A discussion on the data analysis approach used to investigate ICS cyber-attacks was described in the nature of the study, followed by the limitations and delimitations to provide clarification.