A retrofit network intrusion detection system for MODBUS RTU and ASCII industrial control systems

Proceedings of the Annual Hawaii International Conference on System Sciences

Volumn , Issue , 2012, Pages 2338-2345

  Morris, Thomas ^a   Vaughn, Rayford ^a   Dandass, Yoginder ^a  

^a MISSISSIPPI STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONTROL SYSTEMS; MERCURY (METAL); RETROFITTING;

COMMAND INJECTIONS; DENIAL OF SERVICE; INDUSTRIAL CONTROL SYSTEMS; INTRUSION DETECTION AND PREVENTION; INTRUSION PREVENTION; NETWORK INTRUSION DETECTION SYSTEMS;

INTRUSION DETECTION;

EID: 84857971054     PISSN: 15301605     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HICSS.2012.78     Document Type: Conference Paper

References (13)

1. North American Electric Reliability Corporation. Standard CIP-005-4a - Cyber Security - Electronic Security Perimeter(s). January 2011. http://www.nerc.com/files/CIP-005-4a.pdf
2. Caswell, B. Bealeand, J., Foster, J. and Faircloth, J. "Snort2.0 Intrusion Detection," Syngress, Feb. 2003.
3. O'Murchu, L. Last-minute paper: An indepth look into Stuxnet. The 20th Virus Bulletin International Conference. September 29 - October 1, 2010, Vancouver, BC, Canada.
4. Falliere, N., Murchu, L., Chien, E., W32.Stuxnet Dossier, Version 1.3. Symantec Security Repsonse. November 2010. http://tinyurl.com/36y7jzb
5. Reaves, B., Morris, T. Discovery, Infiltration, and Denial of Service in a Process Control System Wireless Network. IEEE eCrime Researchers Summit. October 20-21, 2009. Tacoma, WA
6. Peterson, D. "Quickdraw: Generating Security Log Events for Legacy SCADA and Control System Devices," Conference for Homeland Security, 2009. CATCH '09. Cybersecurity Applications & Technology, vol., no., pp.227-229, 3-4 March 2009
7. Roosta, T. Nilsson, D., Lindqvist, U. Valdes, A. An intrusion detection system for wireless process control systems. 5th IEEE International Conference on Mobile Ad Hoc and Sensor Systems, pp866-872, Atlanta, GA, 2008.
8. Cheung, S., Valdes, A. Communication Pattern Anomaly Detection in Process Control Systems. IEEE International Conference on Technologies for Homeland Security. Waltham, MA. May 11-12, 2009.
9. Valdes, A., Cheung, S. Intrusion Monitoring in Process Control Systems. Proceedings of the 42nd Hawaii International Conference on System Sciences. 2009.
10. Rrushi, J., Kang, K., Detecting Anomalies in Process Control Networks. IFIP International Federation for Information Processing 2009.
11. Gao, W., Morris, T., Reaves, B., Richey, D. On SCADA Control System Command and Response Injection and Intrusion Detection, in the Proceedings of 2010 IEEE eCrime Researchers Summit. Dallas, TX. Oct 18-20, 2010.
12. Morris, T., Pavurapu, K. A Retrofit Network Transaction Data Logger and Intrusion Detection System for Transmission and Distribution Substations, in the Proceedings of 2010 IEEE International Power and Energy Conference. Kuala Lumpur, Malaysia. Nov 29, 2010.
13. Patrick P. Tsang, Sean W. Smith: YASIR: A Low-Latency, High-Integrity Security Retrofit for Legacy SCADA Systems. SEC 2008: 445-459.