Detecting anomalies in process control networks

IFIP Advances in Information and Communication Technology

Volumn 311, Issue , 2009, Pages 151-165

  Rrushi, Julian ^a   Kang, Kyoung Don ^b  

^a OAK RIDGE NATIONAL LABORATORY   (United States)

^b BINGHAMTON UNIVERSITY   (United States)

Author keywords

Anomaly detection; Applied statistics; Distributed control systems

Indexed keywords

ANOMALY DETECTION; APPLIED STATISTICS; IN-PROCESS CONTROL; INDUCTIVE MACHINE LEARNING; LOGISTIC REGRESSIONS; PROBABILITY MASS FUNCTION; STATISTICAL ALGORITHM; STATISTICAL PARAMETERS;

BLOCK CODES; CONTROL SYSTEMS; DISTRIBUTED PARAMETER CONTROL SYSTEMS; ESTIMATION; FUNCTIONS; LEARNING SYSTEMS; MAXIMUM LIKELIHOOD ESTIMATION; PROCESS CONTROL; REGRESSION ANALYSIS; TARGET TRACKING;

LEARNING ALGORITHMS;

EID: 84891760516     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-04798-5_11     Document Type: Conference Paper

References (22)

1. A. Cardenas, S. Amin and S. Sastry Research challenges for the security of control systems, Proceedings of the Third USENIX Workshop on Hot Topics in Security, 2008.
2. F. Cellier and E. Kofman, Continuous System Simulation, Springer, New York, 2006.
3. S. Cheung, B. Dutertre, M. Fong, U. Lindqvist, K. Skinner and A. Valdes, Using model-based intrusion detection for SCADA networks, Proceedings of the SCADA Security Scientific Symposium, 2007.
4. General Electric Company, Advanced Boiling Water Reactor (ABWR), Fairfield, Connecticut (www.gepower.com/prod_serv/products/nuclear_energy/en/new_reactors/abwr.htm).
5. D. Hosmer and S. Lemeshow, Applied Logistic Regression, Wiley, Hoboken, New Jersey, 2000.
6. International Electrotechnical Commission, IEC 61850-7-410: Communication Networks and Systems for Power Utility Automation, Part 7-410: Hydroelectric Power Plants - Communication for Monitoring and Control, Geneva, Switzerland, 2007.
7. H. Javitz and A. Valdes, The NIDES Statistical Component Description and Justification, SRI Project 3131 Annual Report, SRI, Menlo Park, California, 1994.
8. S. Kay, Fundamentals of Statistical Signal Processing, Volume 2: Detection Theory, Prentice Hall, Upper Saddle River, New Jersey, 1998.
9. D. Kleinbaum, L. Kupper, L. Muller and A. Nizam, Applied Regression Analysis and Multivariable Methods, Duxbury Press, Pacific Grove, California, 2007.
10. J. Larsen, SCADA security, presented at Blackhat DC, 2008.
11. E. Lehmann and G. Casella, Theory of Point Estimation, Springer, New York, 2003.
12. J. Marcum, A statistical theory of target detection by pulsed radar, IRE Transactions on Information Theory, vol. 6(2), pp. 59-267, 1960.
13. Modbus IDA, MODBUS Application Protocol Specification v1.1a, North Grafton, Massachusetts (www.modbus.org/specs.php), 2004.
14. M. Naedele and O. Biderbost, Human-assisted intrusion detection for process control systems, Proceedings of the Second International Conference on Applied Cryptography and Network Security, pp. 216-225, 2004.
15. E. Naess, D. Frincke, A. McKinnon and D. Bakken, Configurable middleware-level intrusion detection for embedded systems, Proceedings of the Second International Workshop on Security in Distributed Computing Systems, vol. 2, pp. 144-151, 2005.
16. D. Nicol and P. Heidelberger, Parallel execution for serial simulators, ACM Transactions on Modeling and Computer Simulation, vol. 6(3), pp. 210-242, 1996.
17. J. Rrushi and R. Campbell, An intrusion detection system for operation in nuclear power plants, presented at the Fourth ITI Workshop on Dependability and Security, 2007.
18. J. Rrushi and R. Campbell, Using deception to facilitate intrusion detection in nuclear power plants, Proceedings of the Third International Conference on Information Warfare and Security, 2008.
19. J. Rrushi and K. Kang, Mirage theory: A deception approach to intrusion detection in process control networks, Proceedings of the NATO Symposium on Information Assurance for Emerging and Future Military Systems, 2008.
20. K. Stouffer, J. Falco and K. Scarfone, Guide to Industrial Control Systems (ICS) Security, Special Publication 800-82, Final Public Draft, National Institute of Standards and Technology, Gaithersburg, Maryland, 2008.
21. U.S. Department of Energy, DoE Fundamentals: Handbook of Nuclear Physics and Reactor Theory, DOE-HDBK-1019/1-93, Washington, DC, 1993.
22. C. Wuollet, A. Romanenko, H. Jack, J. Baum, J. Orozco and M. de Sousa, MatPLC (mat.sourceforge.net), 2006.