A Comprehensive Review of Cybersecurity Frameworks and Defense Mechanisms for Modbus and HTTP in Industrial Control Systems

Industrial Control Systems (ICS) form the backbone of critical infrastructure, enabling automation and control in sectors such as energy, water, and manufacturing. The convergence of Operational Technology (OT) and Information Technology (IT) has introduced significant cybersecurity challenges, particularly for legacy communication protocols like Modbus and HTTP, which were not designed with security in mind. This paper provides a comprehensive framework for understanding the attack and defense mechanisms associated with two protocols i.e., Modbus and HTTP, used in ICS. We systematically analyze the inherent vulnerabilities of these protocols, survey proposed security enhancements including cryptographic solutions, intrusion detection systems, and security-by-design approaches, and evaluate existing cybersecurity frameworks such as MITRE ATT&CK, NIST CSF, and the Cyber Kill Chain. The review identifies a persistent gap in integrated, protocol-specific frameworks that address both attack simulation and defense validation in virtualized ICS environments. By synthesizing current research, this study highlights trends in threat modeling, machine learning-based anomaly detection, and the evolution of testbeds, providing a foundation for future work aimed at developing holistic security frameworks for Modbus and HTTP-based industrial networks.