Survey of Malware Threats and Recommendations to Improve Cybersecurity for Industrial Control Systems Version 1.0 [open pdf - 469KB]
"Critical infrastructure is vulnerable to cyber threats and the consequences of attacking an industrial control system (ICS) may result in loss of life. ICSs are different in several ways from information technology (IT) systems. As a result, the processes to protect IT cannot be applied to ICS infrastructure. This report presents common threat vectors to ICSs and lessons learned from recent malware to provide recommendations to protect critical infrastructure from cyber attacks."
Defense Technical Information Center (DTIC): http://www.dtic.mil/dtic/