System and method for assessing an impact of malicious software causing a denial of service of components of industrial automation and control systems

A system for assessing an impact of malicious software causing a denial of service of components of industrial automation and control systems, the system comprising:

• at least one processor of a computing device configured to:
• generate a configuration of an industrial automation and control system (IACS) on a testing device based on specifications;
• obtain a set of investigated software, where the set includes at least one sample of one malicious software;
• test the generated configuration of the IACS using the received set of investigated software;
• identify occurrences of denials of service of the components of the testing device which are used to simulate the generated configuration of IACS;
• determine an impact of the malicious software on the generated configuration of the IACS, and a degree of degradation of a performance of the generated configuration of IACS;
• and
• pronounce a verdict as to a danger of the malicious software for the generated configuration of IACS based on the determined impact of the malicious software.

A non-transitory computer readable medium storing thereon computer executable instructions for assessing an impact of malicious software causing a denial of service of components of industrial automation and control systems, including instructions for:

• generating a configuration of an industrial automation and control system (IACS) on a testing device based on specifications;
• obtaining a set of investigated software, where the set includes at least one sample of one malicious software;
• testing the generated configuration of the IACS using the received set of investigated software;
• identifying occurrences of denials of service of the components of the testing device which are used to simulate the generated configuration of IACS;
• determining an impact of the malicious software on the generated configuration of the IACS, and a degree of degradation of a performance of the generated configuration of IACS;
• and
• pronouncing a verdict as to a danger of the malicious software for the generated configuration of IACS based on the determined impact of the malicious software.