Adversarial AI in ICS/OT - The Next Cyber Threat to Critical Infrastructure

Industrial Control Systems (ICS) and Operational Technology (OT) environments are rapidlytransforming as Artificial Intelligence (AI) is increasingly integrated into cybersecurityoperations.AI-driven detection systems now identify anomalies, monitor industrial processes, andenable faster responses to cyber threats. However, this evolution introduces a new and underestimated risk: adversarial AI, thedeliberate manipulation of machine learning models to cause silent failures. In ICS/OT environments, silent model failures can lead to contaminated water, power gridfailures, compromised manufacturing lines, and disrupted transportation systems.Industrial environments differ from traditional IT systems. They rely on tightly controlled,predictable processes and expect every component to behave in a specific manner. But thatstability comes with a hidden weakness. Even minor shifts in data or signal behavior can slipthrough unnoticed, and when they do, their impact is evident in practical scenarios.Additionally, CISA has raised concerns that align with what many practitioners are seeing onthe ground: state-linked threat actors are actively probing and targeting critical industrialsystems in the United States.

Authors

Institutions

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-05-12
DOI
https://doi.org/10.5281/zenodo.20146218
Primary Topic
Smart Grid Security and Resilience
Type
preprint
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
preprint

Adversarial AI in ICS/OT - The Next Cyber Threat to Critical Infrastructure

Muhammad Ali Khan Khan
Zenodo (CERN European Organization for Nuclear Research)
Smart Grid Security and Resilience
preprint

Adversarial AI in ICS/OT - The Next Cyber Threat to Critical Infrastructure

Muhammad Ali Khan Khan
preprint en

Abstract

Industrial Control Systems (ICS) and Operational Technology (OT) environments are rapidlytransforming as Artificial Intelligence (AI) is increasingly integrated into cybersecurityoperations.AI-driven detection systems now identify anomalies, monitor industrial processes, andenable faster responses to cyber threats. However, this evolution introduces a new and underestimated risk: adversarial AI, thedeliberate manipulation of machine learning models to cause silent failures. In ICS/OT environments, silent model failures can lead to contaminated water, power gridfailures, compromised manufacturing lines, and disrupted transportation systems.Industrial environments differ from traditional IT systems. They rely on tightly controlled,predictable processes and expect every component to behave in a specific manner. But thatstability comes with a hidden weakness. Even minor shifts in data or signal behavior can slipthrough unnoticed, and when they do, their impact is evident in practical scenarios.Additionally, CISA has raised concerns that align with what many practitioners are seeing onthe ground: state-linked threat actors are actively probing and targeting critical industrialsystems in the United States.

Zenodo (CERN European Organization for Nuclear Research)
Twitter (United States) (US), Daikin (United States) (US), United Negro College Fund (US), National Grid (United States) (US), Toyota Motor North America (United States) (US)
Industry, innovation and infrastructure
Smart Grid Security and Resilience
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.