Data fusion-base anomay detection in networked critical infrastructures

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2013, Pages

  Genge, Bela ^a   Siaterlis, Christos ^a   Karopoulos, Georgios ^a  

^a JOINT RESEARCH CENTRE   (Italy)

Author keywords

Anomaly Detection System; Data Fusion; DDoS; MPLS; Networked Critical Infrastructures; SCADA

Indexed keywords

ANOMALY DETECTION SYSTEMS; DDOS; DISTRIBUTED DENIAL OF SERVICE ATTACK; INFORMATION AND COMMUNICATION TECHNOLOGIES; MPLS; MULTI PROTOCOL LABEL SWITCHING; REMOTE MONITORING AND CONTROL; SCADA;

CRITICAL INFRASTRUCTURES; DATA FUSION; ELECTRIC POWER DISTRIBUTION; INFORMATION TECHNOLOGY; VIRTUAL PRIVATE NETWORKS;

PUBLIC WORKS;

EID: 84886020779     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSNW.2013.6615505     Document Type: Conference Paper

References (27)

1. D. Fidler, 'Tinker, Tailor, Soldier, Duqu: Why cyberespionage is more dangerous than you think, " International Journal of Critical Infrastructure Protection, vol. 5, no. I, pp. 28-29, 2012.
2. B. Reaves and T. Morris, ''Analysis and mitigation of vulnerabilities in short-range wireless communications for industrial control systems;' International Journal of Critical Infrastructure Protection, vol. 5, no. 34, pp. 154-174, 2012.
3. I. Nai Fovino, A. Carcano, M. Masera, and A. Trombetta, ''An experimental investigation of malware attacks on SCADA systems, " International Journal of Critical Infrastructure Protection, vol. 2, no. 4, pp. 139-145, 2009.
4. T. Chen and S. Abu-Nimeh, ''Lessons from Stuxnet, " Computer, vol. 44, no. 4, pp. 91-93, april 2011.
5. E. Pleijsier, 'Towards anomaly detection in scada networks using connection patterns, " in 18th Twente Student Conference on IT, 2013.
6. R. Barbosa, R. Sadre, and A. Pras, ' Towards periodicity based anomaly detection in SCADA networks, " in 17th IEEE Conference on Emerging Technologies & Factory Automation (ETFA 2012), 2012, pp. 1-4.
7. I. Garitano, C. Siaterlis, B. Genge, R. Uribeetxeberria, and U. Zurutuza, ''A method to construct network traffic models for process control systems, " in 17th IEEE Conference on Emerging Technologies & Factory Automation (ETFA 2012), 2012, pp. 1-8.
8. N. Svendsen and S. Wolthusen, "Using physical models for anomaly detection in control systems, " in Critical Infrastructure Protection Ill, ser. IFlP Advances in Information and Communication Technology, C. Palmer and S. Shenoi, Eds. Springer Berlin Heidelberg, 2009, vol. 311, pp. 139-149.
9. N. Svendsen and S. Wolthusen, ''Modeling and detecting anomalies in scada systems, " in Critical Infrastructure Protection II, ser. The International Federation for Information Processing, M. Papa and S. Shenoi, Eds. Springer US, 2009, vol. 290, pp. 101-113.
10. A. A. Cardenas, S. Amin, Z.-S. Lin, Y.-L. Huang, C.-Y. Huang, and S. Sastry, ''Attacks against process control systems: risk assessment, detection, and response, " in Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security, ser. ASIACCS '11. New York, NY, USA: ACM, 2011, pp. 355-366.
11. I. Nai Fovino, A. Coletta, A. Carcano, and M. Masera, "Critical statebased filtering system for securing scada network protocols, " Industrial Electronics, IEEE Transactions on, vol. 59, no. 10, pp. 3943-3950, 2012.
12. A. Carcano, A. Coletta, M. Guglielmi, M. Masera, I. Fovino, and A. Trombetta, ''A multidimensional critical state analysis for detecting intrusions in scada systems;' Industrial Informatics, IEEE Transactions on, vol. 7, no. 2, pp. 179-186, 2011.
13. I. Nai Fovino, A. Carcano, T. De Lacheze Murel, A. Trombetta, and M. Masera, ''Modbusldnp3 state-based intrusion detection system, " in Advanced Information Networking and Applications (AlNA), 2010 24th IEEE International Conference on, 2010, pp. 729-736.
14. M. Raciti and S. Nadjm-Tehrani, "Embedded cyber-physical anomaly detection in smart meters;' in 7th International Conference on Critical Information Infrastructures Security, 2012.
15. M. Levorato and U. Mitra, ''Fast anomaly detection in SmartGrids via sparse approximation theory;' in Sensor Array and Multichannel Signal Processing Workshop (SAM), 2012 IEEE 7th, 2012, pp. 5-8.
16. G. Shafer, ''A mathematical theory of evidence, " Princeton University Press, 1976.
17. J. Kohlas and P. Monney, 'Theory of evidence-a survey of its mathematical foundations, applications and computational analysis, " ZOR-Mathematical Methods of Operations Research, vol. 39, pp. 35-68, 1994.
18. K. Tomsovic and B. Baer, ''Fuzzy information approaches to equipment condition monitoring and diagnosis, " in IEEE Press, 1998, pp. 59-84.
19. B. Genge, C. Siaterlis, I. Nai Fovino, and M. Masera, ' 'A cyber-physical experimentation environment for the security analysis of networked industrial control systems, " Computers & Electrical Engineering, vol. 38, no. 5, pp. 1146-1161, 2012.
20. C. Siaterlis, A. Garcia, and B. Genge, "On the use of Emulab testbeds for scientifically rigorous experiments, " IEEE Communications Surveys and Tutorials, vol. PP, no. 99, pp. 1-14, 2012.
21. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Jogiekar, ''An integrated experimental environment for distributed systems and networks, " in Proceedings of the 5th Symposium on Operating Systems Design and Implementation, 2002, pp. 255-270.
22. B. Genge and C. Siaterlis, ' 'Analysis of the effects of distributed denialof-service attacks on MPLS networks;' International Journal of Critical Infrastructure Protection, no. 0, pp. -, 2013.
23. T. Than, J. Fandino, N. Hadjsaid, J. Sabonnadiere, and H. Vu, "Emergency load shedding to avoid risks of voltage instability using indicators, " Power Systems, IEEE Transactions on, vol. 9, no. 1, pp. 341-351, feb 1994.
24. M. Manera and A. Marzullo, ''Modelling the load curve of aggregate electricity consumption using principal components, " Environ. Model. Softw., vol. 20, no. 11, pp. 1389-1400, Nov. 2005.
25. mM and Terna, "Cisco and mM provide high-voltage grid operator with increased reliability and manageability of its telecommunication infrastructure;' IBM Case Studies, 2007.
26. C. Deccio, "Maintenance, mishaps and mending in deployments of the domain name system security extensions (DNSSEC), " International Journal of Critical Infrastructure Protection, vol. 5, no. 2, pp. 98-103, 2012.
27. S. Rahimi and M. Zargham, ''Analysis of the security of VPN configurations in industrial control environments;' International Journal of Critical Infrastructure Protection, vol. 5, no. 1, pp. 3-13, 2012.