Industrial control systems security: What is happening?

IEEE International Conference on Industrial Informatics (INDIN)

Volumn , Issue , 2013, Pages 664-669

  Krotofil, Marina ^a   Gollmann, Dieter ^a  

^a HAMBURG UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

GROWING BODIES; INDUSTRIAL CONTROL SYSTEMS; PAPER SURVEYS; RESEARCH EFFORTS; SECURITY GOALS; SECURITY ISSUES; SECURITY RESEARCH; STATE OF THE ART;

CONTROL SYSTEMS; INDUSTRY; INFORMATION SCIENCE; INTELLIGENT CONTROL;

INDUSTRIAL RESEARCH;

EID: 84889002308     PISSN: 19354576     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INDIN.2013.6622963     Document Type: Conference Paper

References (58)

1. S.Rinaldi, J.Peerenboom, and T.Kelly, "Identifying, understanding, and analyzing critical infrastructure interdependencies," Control Systems, vol.21, no.6, pp.11-25, 2001.
2. D.Gollmann, "From insider threats to business processes that are secure-by-design," in INCoS, 2011, p.627.
3. E.Byres, "Network secures process control," InTech Magazine, 1998.
4. "ICS-CERT Monthly Monitor," October-December 2012.
5. "Project Basecamp," http://www.digitalbond.com/tools/basecamp, 2011.
6. G.Gritsai et al., "SCADA safety in numbers V1.1," Positive Technologies, 2012.
7. R.Santamarta, "Reversing industrial firmware for fun and backdoors I," 2011.
8. -,"HERE BE BACKDOORS: A jorney into the secrets of industrial firmware," Black Hat USA, 2012.
9. "Vulnerability disclosure policy," http://ics-cert.us-cert.gov/ icscert/ disclosure.html, ICS-CERT(USA), 2012.
10. ́ E.P.Leverett, "Quantitatively assessing and visualising industrial system attack surfaces," Master's Thesis, Uni.of Cambridge, UK, 2011.
11. J.C.Matherly, "man SHODAN," http://www.shodanhq.com/help, 2009.
12. N.Falliere, L.O.Murchu, and E.Chien, "W32.Stuxnet Dossier," Symantic Security Response, Tech.Rep., 2010.
13. R.Lagner, "Blog," http://www.langner.com/en/blog/, 2010.
14. D.Beresford, "Exploiting Siemens Simatic S7 PLCs," Black Hat USA, 2011.
15. T.Sauter, S.Soucek, W.Kastner, and D.Dietrich, "The evolution of factory and building automation," Industrial Electronics Magazine, IEEE, vol.5, no.3, pp.35-48, 2011.
16. I.N.Fovino, A.Coletta, and M.Masera, "Taxonomy of security solutions for the SCADA sector," ESCoRTS, Deliverable: D22, Version:1.1, 2010.
17. M.Sundell et al., "White paper on industrial automation security in fieldbus and field device level," 2011.
18. S.East, J.Butts, M.Papa, and S.Shenoi, "A taxonomy of attacks on theDNP3 protocol," 2009, pp.67-81.
19. M.Majdalawieh, F.Parisi-Presicce, and D.Wijesekera, "DNPSec: Distributed network protocol version 3 (DNP3) security framework," in Advances in CISSE, 2006, pp.227-234.
20. J.Rrushi, "SCADA protocol vulnerabilities," ser.LNCS, 2012, vol.7130, pp.150-176.
21. I.Fovino, A.Carcano, M.Masera, and A.Trombetta, "Design and implementation of a secure modbus protocol," 2009, pp.83-96.
22. C.Bellettini and J.Rrushi, "Combating memory corruption attacks on scada devices," in CIP II, 2009, pp.141-156.
23. J.A kerberg and M.Bjorkman, "Exploring security in PROFINET IO," in COMPSAC, 2009, pp.406-412.
24. -,"Exploring network security in PROFIsafe," in SAFECOMP, 2009, pp.67-80.
25. J.Larsen, "Breakage," Black Hat USA, 2007.
26. M.Zeller, "Myth or reality-does the aurora vulnerability pose a risk to my generator?" in Annual Conference for Protective Relay Engineers, 2011, pp.130-136.
27. A.Carcano, I.N.Fovino, M.Masera, and A.Trombetta, "SCADA malware, a proof of concept," in CRITIS, 2008, pp.211-222.
28. S.McLaughlin, "On dynamic malware payloads aimed at programmable logic controllers," in HotSec, 2011.
29. R.R.R.Barbosa, R.Sadre, and A.Pras, "A first look into SCADA network traffic," in NOMS, 2012, pp.518-521.
30. D.Had?ziosmanovíc, D.Bolzoni, S.Etalle, and P.H.Hartel, "Challenges and opportunities in securing industrial control systems," in COMPENG, 2012, pp.1-6.
31. B.Genge, C.Siaterlis, I.N.Fovino, and M.Masera, "A cyber-physical experimentation environment for the security analysis of networked industrial control systems," 2012, vol.38, no.5.
32. I.Fovino, M.Masera, L.Guidi, and G.Carpi, "An experimental platform for assessing SCADA vulnerabilities and countermeasures in power plants," in Human System Interactions, 2010, pp.679-686.
33. J.J.Downs and E.F.Vogel, "A plant-wide industrial process control problem," 1993, vol.17, no.3, pp.245-255.
34. R.Bell and K.A strom, "Dynamic models for boiler-turbine-alternator units: Data logs and parameter estimation for a 160 mw unit," 1987.
35. A.A.Ćardenas, S.Amin, Z.-S.Lin, Y.-L.Huang, C.-Y.Huang, and S.Sastry, "Attacks against process control systems: risk assessment, detection, and response." in ASIACCS, 2011, pp.355-366.
36. T.McEvoy and S.Wolthusen, "A plant-wide industrial process control security problem," in CIP V, 2011, pp.47-56.
37. B.Genge, I.Nai Fovino, C.Siaterlis, and M.Masera, "Analyzing cyberphysical attacks on networked industrial control systems," in Critical Infrastructure Protection V, 2011, pp.167-183.
38. T.McEvoy and S.Wolthusen, "Detecting sensor signal manipulations in non-linear chemical processes," in CIP IV, 2010, vol.342, pp.81-94.
39. B.Zhu and S.Sastry, "SCADA-specific intrusion detection/prevention systems: a survey and taxonomy," in WSCS, 2010.
40. R.R.R.Barbosa, R.Sadre, and A.Pras, "Difficulties in modeling SCADA traffic: A comparative analysis," ser.LNCS, vol.7192, 2012, pp.126-135.
41. J.Edmonds, M.Papa, and S.Shenoi, "Security analysis of multilayer SCADA protocols," in Critical Infrastructure Protection, 2007, pp.205-221.
42. J.Hieb, J.Graham, and J.Guan, "An ontology for identifying cyber intrusion induced faults in process control systems," in Critical Infrastructure Protection III, 2009, pp.125-138.
43. T.R.McEvoy and S.D.Wolthusen, "A formal adversary capability model for SCADA environments," in CRITIS, 2011, pp.93-103.
44. R.Anderson and S.Fuloria, "Security economics and critical national infrastructure," in Economics of Information Security and Privacy, 2010, pp.55-66.
45. A.A.Ćardenas, S.Amin, and S.Sastry, "Secure control: Towards survivable cyber-physical systems," in WCPS, 2008, pp.495-500.
46. B.Zhu, A.Joseph, and S.Sastry, "A taxonomy of cyber attacks on SCADA systems," in iThings/CPSCom, 2011, pp.380-388.
47. D.Gollmann, "Veracity, plausibility, and reputation." ser.LNCS, vol.7322, 2012, pp.20-28.
48. B.Genge, C.Siaterlis, and M.Hohenadel, "Impact of network infrastructure parameters to the effectiveness of cyber attacks against industrial control systems," IJCCC, vol.7, no.4, pp.673-686.
49. Y.Huang, A.Cardenas, S.Amin, S.-Z.Lin, H.-Y.Tsai, and S.S.Sastry, "Understanding the physical and economic consequences of attacks against control systems." IJCIP, vol.2, no.3, pp.72-83, 2009.
50. S.Amin, A.A.Ćardenas, and S.Sastry, "Safe and secure networked control systems under denial-of-service attacks." ser.LNCS, 2009, pp.31-45.
51. D.Dina Had?ziosmanovíc and D.Bolzoni and P.H.Hartel, "A log mining approach for process monitoring in SCADA," IJIS, vol.11, pp.231-251, 2012.
52. N.Goldenberg and A.Wool, "Accurate modeling of Modbus/TCP for intrusion detection in SCADA systems," IJCIP, no.0, 2013.
53. I.Fovino, M.Masera, M.Guglielmi, A.Carcano, and A.Trombetta, "Distributed intrusion detection system for SCADA protocols," in Critical Infrastructure Protection IV, 2010, pp.95-110.
54. M.Naedele and O.Biderbost, "Human-assisted intrusion detection for process control systems," in ACNS, 2004, pp.216-225.
55. J.L.Rrushi, "An exploration of defensive deception in industrial communication networks," IJCIP, vol.4, no.4, 2011.
56. D.Had?ziosmanovíc, L.Simionato, D.Bolzoni, E.Zambon, and S.Etalle, "N-gram against the machine: On the feasibility of the n-gram network analysis for binary protocols," ser.LNCS, vol.7462, 2012, pp.354-373.
57. "ACAD/Medre.A: 10000s of AutoCAD designs leaked in suspected industrial espionage," ESET, Tech.Rep., 2012.
58. "Abnormal Situation Management," http://www.asmconsortium.net.