Modbus/DNP3 state-based intrusion detection system

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn , Issue , 2010, Pages 729-736

  Fovino, Igor Nai ^a   Carcano, Andrea ^b   De Lacheze Murel, Thibault ^a   Trombetta, Alberto ^b   Masera, Marcelo ^a  

^a JOINT RESEARCH CENTRE   (Italy)

^b UNIVERSITY OF INSUBRIA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNICATION PROTOCOLS; CRITICAL INFRASTRUCTURE; CRITICAL STATE; INNOVATIVE APPROACHES; INTERNAL REPRESENTATION; INTRUSION DETECTION SYSTEMS; MONITOR SYSTEM; OPERATING STATE; STATE EVOLUTIONS; STATE-BASED;

COMMUNICATION; COMPUTER CRIME; INTRUSION DETECTION; MONITORING;

SCADA SYSTEMS;

EID: 77954330725     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2010.86     Document Type: Conference Paper

References (15)

1. G. Dondossola, M. Masera, I. Nai Fovino, J. Szanto: Effects of intentional threats to power substation control systems, International Journal of Critical Infrastructure, (IJCIS), Vol. 4, No. 1/2, 2008.
2. I. Nai Fovino, M. Masera, R. Leszczyna: ICT Security Assessment of a Power Plant, a Case Study In Proceeding of the Second Int. Conference on Critical Infrastructure Protection, Arlington, USA, March 2008.
3. A. Carcano, I. Nai Fovino, M. Masera, A. Trombetta: Scada Malware, a proof of Concept. In proceeding of the 3rd International Workshop on Critical Information Infrastructures Security, Rome, October 13-15, 2008.
4. D. E. Denning: An Intrusion-Detection Model. IEEE Transactions on Software Engineering. Feb. 1987, Vol. SE-13, Issue 2, pp. 222-232, ISSN 0098-5589.
5. M. Roesch: Snort-Lightweight Intrusion Detection for Networks. Proceedings of LISA '99: 13th Systems Administration Conference, Seattle, Washington, USA, November 712, 1999.
6. http://www.digitalbond.com/index.php/research/ids-signatures/ modbustcp-ids-signatures/, last access 9/04/2009.
7. P. Gross, J. Parekh and G. Kaiser: "Secure Selecticast for collaborative Intrusion Detection systems". In Proceedings of the International Workshops on DEBS, 2004.
8. V. Yegneswaran, P. Barford and S. Jha: Global Intrusion Detection in the Domino Overlay System. In Proceedings of the 11th ANDSSS Conference 2004.
9. F. Cuppens, A. Miege: Alert correlation in a cooperative intrusion detection framework. In Proc. Security and Privacy 2002.
10. Igor Nai Fovino and Marcelo Masera: A service oriented approach to the assessment of Infrastructure Security. In Proceeding of the First Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection, Dartmouth College, Hanover, New Hampshire, USA, March 19-21, 2007.
11. Igor Nai Fovino and Marcelo Masera: Emergent Disservices in Interdependent Systems and System-of-Systems. In proceeding of the IEEE Conference on Systems, Man and Cybernetics, October 8-11 2006, Taipei.
12. M. Masera and I. Nai Fovino: Models for security assessment and management. In proceeding of the International Workshop on Complex Network and Infrastructure Protection 2006.
13. I. Nai Fovino and M. Masera: Modelling Information Assets for Security Risk Assessment in Industrial settings. In proceeding of the 15th EICAR Annual Conference, 2006, Hambourg.
14. P. Ning, Y. Cui, and D. S. Reeves: Constructing Attack Scenarios through Correlation of Intrusion Alerts. In Proceedings of the ACM Conference on Computer and Communications Security, pages 245-254, Washington, D. C., November 2002.
15. http://www.modbus.org/.