It is generally understood that an attacker with limited resources would not be able to carry out targeted attacks on Industrial Control Systems. Breaking this general notion, we present case studies of major attacks on Industrial Control Systems (ICSs) in the last 20 years. The attacks chosen are the most prominent ones in terms of the economic loss inflicted, the potential to damage physical equipment and to cause human casualties. For each of these attacks, we describe the attack methodology used and suggest possible solutions to prevent such attacks. We analyze each case study to provide a better insight into the development of future cybersecurity techniques for ICSs. Finally, we suggest some recommendations on the best practices for protecting ICSs.

通常可以理解，资源有限的攻击者将无法对工业控制系统进行有针对性的攻击。打破这一一般概念，我们将介绍过去20年中对工业控制系统（ICS）的重大攻击的案例研究。就造成的经济损失，损坏物理设备和造成人员伤亡的可能性而言，选择的攻击是最突出的攻击。对于每种攻击，我们都将描述所使用的攻击方法，并提出防止此类攻击的可行解决方案。我们分析每个案例研究，以更好地了解ICS未来的网络安全技术的发展。最后，我们就保护ICS的最佳做法提出一些建议。