Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Performance Evaluation of Secure Industrial Control System Design: A Railway Control System Case Study



Xenofon Koutsoukos, Himanshu Neema, Sajal Bhatia, Janos Sztipanovits, Keith A. Stouffer, CheeYee Tang


Industrial Control Systems (ICS) are composed of sensors, actuators, control processing units, and communication devices all interconnected to provide monitoring and control capabilities. Due to the integral role of the networking infrastructure, such systems are vulnerable to cyber attacks. In-depth consideration of security and resilience and their effects to system performance are very important. This paper focuses on Railway Control Systems (RCS), an important and potentially vulnerable class of ICS, and presents a simulation integration platform that enables (1) Modeling and simulation including realistic models of cyber and physical components and their interactions, as well as operational scenarios that can be used for evaluations of cybersecurity risks and mitigation measures and (2) Evaluation of performance impact and security assessment of mitigation mechanisms focusing on authentication mechanisms and firewalls. The approach is demonstrated using simulation results from a realistic RCS case study.
Proceedings Title
The 11th Annual Cyber and Information Security Research (CISR) Conference
Conference Dates
April 6-7, 2016
Conference Location
Oak Ridge, TN


Cybersecurity, Cyber-physical systems (CPS), Industrial control systems (ICS), Threat modelling
Created April 29, 2016, Updated October 20, 2017