ICS-LTU2022: A dataset for ICS vulnerabilities

Industrial control systems (ICS) are a collection of control systems and associated instrumentation for controlling and monitoring industrial processes. Critical infrastructure relies on supervisory control and data acquisition (SCADA), a subset of ICS specifically designed for monitoring and controlling industrial processes over large geographic areas. Cyberattacks like the Colonial Pipeline ransomware case have demonstrated how an adversary may compromise critical infrastructure. The Colonial Pipeline ransomware attack led to a week’s pipeline shutdown, causing a gas shortage in the United States. As existing vulnerability assessment tools cannot be used in the context of ICS systems, vulnerability datasets specified for ICSs are needed to evaluate the security weaknesses. Our secondary metadata, ICS-LTU2022, consists of multiple features that can be used for vulnerability assessment and risk evaluation in industrial control systems. A description of the dataset, its characteristics, and data analysis are also presented in this paper. Vulnerability analysis was conducted based on the top 10 vulnerabilities in terms of severity, frequency by year, impact, components of the ICS, and common weaknesses. The ICS-LTU2022 vulnerabilities dataset is updated biannually. Our proposed dataset provides security researchers with the most recent ICS critical vulnerabilities. • The research is based on collecting vulnerability data from public sources, primarily the National Vulnerability Database and Common Vulnerabilities and Exposures. • The dataset compiled from these sources is comprehensive, encompassing a wide range of vulnerabilities in the ICS domains. It includes details such as vulnerability descriptions, severity assessments, and affected products. • The primary objective of this research is to identify and analyse patterns and trends within ICS vulnerabilities to shed light on the evolving nature of security threats in this critical sector. • The findings from this analysis offer valuable insights into the state of cybersecurity in ICS systems. Researchers and practitioners can use these insights to better understand the risks and challenges in this field. • The main findings, considerations for professionals, data quality evaluations, and threats to validity are discussed.