A first look into SCADA network traffic

Proceedings of the 2012 IEEE Network Operations and Management Symposium, NOMS 2012

Volumn , Issue , 2012, Pages 518-521

  Barbosa, Rafael Ramos Regis ^a   Sadre, Ramin ^a   Pras, Aiko ^a  

^a UNIVERSITY OF TWENTE   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATED PROCESS; EMPIRICAL FOUNDATIONS; FIRST LOOK; MANAGEMENT OPERATION; NETWORK TRAFFIC; SIMPLE NETWORK MANAGEMENT PROTOCOLS; SUPERVISORY CONTROL AND DATA ACQUISITION; TRAFFIC PATTERN; WATER DISTRIBUTIONS;

AUTOMATION; NETWORK MANAGEMENT; WATER SUPPLY SYSTEMS;

INTERNET PROTOCOLS;

EID: 84864202667     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMS.2012.6211945     Document Type: Conference Paper

References (13)

1. J. Case, M. Fedor, M. Schoffstall, and J. Davin, "RFC 1157: Simple network management protocol (SNMP)," IETF, April, 1990.
2. R. Barbosa, R. Sadre, and A. Pras, "Difficulties in modeling scada traffic: A comparative analysis," in Passive and Active Measurement. Springer, 2012.
3. V. Igure, S. Laughter, and R. Williams, "Security issues in SCADA networks," Computers & Security, vol. 25, no. 7, pp. 498-506, 2006.
4. S. Cheung, K. Skinner, B. Dutertre, M. Fong, U. Lindqvist, and A. Valdes, "Using model-based intrusion detection for SCADA networks," in Proceedings of the SCADA Security Scientific Symposium. Citeseer, 2007, pp. 1-12.
5. A. Valdes and S. Cheung, "Communication pattern anomaly detection in process control systems," in Technologies for Homeland Security, 2009. HST '09. IEEE Conference on, IEEE. IEEE, May 2009, pp. 22-29.
6. W. Stallings, SNMP, SNMPv2, SNMPv3, and RMON 1 and 2. Addison-Wesley Professional, 1999.
7. L. Andrey, O. Festor, A. Lahmadi, A. Pras, and J. Schonwalder, "Survey of SNMP performance analysis studies," International Journal of Network Management, vol. 19, no. 6, pp. 527-548, Nov. 2009.
8. T. Oetiker, "MRTG - The Multi Router Traffic Grapher," in Proceedings of the 12th USENIX conference on System administration. Berkeley, CA, USA: USENIX Association, 1998, pp. 141-148.
9. J. Schonwalder, A. Pras, M. Harvan, J. Schippers, and R. van de Meent, "SNMP Traffic Analysis: Approaches, Tools, and First Results," 2007 10th IFIP/IEEE International Symposium on Integrated Network Management, pp. 323-332, May 2007.
10. G. van den Broek, S. ten Hoeve, G. C. Moreira Moura, and A. Pras, "SNMP Trace Analysis: Results of Extra Traces," Centre for Telematics and Information Technology University of Twente, Enschede, Technical Report TR-CTIT-10-06, Dec. 2009.
11. "TCPDUMP." [Online]. Available: http://www.tcpdump.org/
12. A. Sperotto, G. Schaffrath, R. Sadre, C. Morariu, A. Pras, and B. Stiller, "An overview of ip flow-based intrusion detection," Communications Surveys & Tutorials, IEEE, vol. 12, no. 3, pp. 343-356, 2010.
13. S. Floyd and V. Paxson, "Difficulties in simulating the Internet," IEEE/ACM Transactions on Networking, vol. 9, no. 4, pp. 392-403, 2001.