Intrusion detection in cyber-physical systems: Techniques and challenges

IEEE Systems Journal

Volumn 8, Issue 4, 2014, Pages 1052-1062

  Han, Song ^a   Xie, Miao ^b   Chen, Hsiao Hwa ^c   Ling, Yun ^a  

^a ZHEJIANG GONGSHANG UNIVERSITY   (China)

^b UNIVERSITY OF NEW SOUTH WALES   (Australia)

^c NATIONAL CHENG KUNG UNIVERSITY   (Taiwan)

Author keywords

Cyber physical system (CPS); intrusion detection; security.

Indexed keywords

CYBER PHYSICAL SYSTEM; EMBEDDED SYSTEMS; INDUSTRIAL RESEARCH; NETWORK SECURITY; PROCESS CONTROL;

CYBER PHYSICAL SYSTEMS (CPSS); CYBER-PHYSICAL SYSTEMS (CPS); INDUSTRIAL CONTROL SYSTEMS; INSTRUCTION DETECTION; MONITOR AND CONTROL; RESEARCH PRIORITIES; SCIENCE AND TECHNOLOGY; SECURITY;

INTRUSION DETECTION;

EID: 84913586160     PISSN: 19328184     EISSN: 19379234     Source Type: Journal    
DOI: 10.1109/JSYST.2013.2257594     Document Type: Article

References (51)

1. E. A. Lee, "CPS foundations," in Proc. 47th ACM/IEEE Des. Autom. Conf., Jun. 2010, pp. 737-742.
2. A. Cardenas, S. Amin, and S. Sastry, "Secure control: Towards survivable cyber-physical systems," in Proc. 28th Int. Conf. Distrib. Comput. Syst. Workshops, Jun. 2008, pp. 495-500.
3. Y. Tan, S. Goddard, and L. C. Perez, "A prototype architecture for cyberphysical systems," ACM SIGBED Rev., vol. 5, no. 1, Jan. 2008, pp. 1-2.
4. I. Lee and O. Sokolsky, "Medical cyber physical systems," in Proc. 47th ACM/IEEE Des. Autom. Conf., Jul. 2010, pp. 743-748.
5. M. D. Ilic L. Xie, U. A. Khan, and J. M. F. Moura, "Modeling of future cyber-physical energy systems for distributed sensing and control," IEEE Trans. Syst., Man, Cybern. A, Syst., Humans, vol. 40, no. 4, pp. 825-838, Jul. 2010.
6. R. (R.) Rajkumar, I. Lee, L. Sha, and J. Stankovic, "Cyber-physical systems: The next computing revolution," in Proc. 47th ACM/IEEE Des. Autom. Conf., Jul. 2010, pp. 731-736.
7. R. A. Kisner, W. Manges, L. MacIntyre, J. Nutaro, J. Munro, Jr, P. Ewing, M. Howlader, P. Kuruganti, R. Wallace, and M. Olama, "Cybersecurity through real-time distributed control systems," Oak Ridge National Laboratory, Oak Ridge, TN, USA, Tech. Rep. ORNL/TM-2010/30, Apr. 2010.
8. A. Cardenas, S. Amin, B. Sinopoli, A. Giani, A. Perrig, and S. S. Sastry, "Challenges for securing cyber physical systems," in Proc. 1st Workshop Cyber-Physical Syst. Security, 2009, to be published.
9. C. Codella, A. Hampapur, C.-S. Li, D. Pendarakis, and J. R. Rao, "Continuous assurance for cyber physical system security," in Proc. 1st Workshop Future Directions Cyber-Phys. Syst. Security (CPSSW), Newark, NJ, USA, Jul. 2009.
10. C.-W. Ten, G. Manimaran, and C.-C. Liu, "Cybersecurity for critical infrastructures: Attack and defense modeling," IEEE Trans. Syst., Man, Cybern. A, Syst., Humans, vol. 40, no. 4, pp. 853-865, Jul. 2010.
11. J. Bigham, D. Gamez, and N. Lu, "Safeguarding SCADA systems with anomaly detection," in Computer Network Security, vol. 2776, Berlin, Germany: Springer, 2003, pp. 171-182.
12. D. Yang, A. Usynin, and J. W. Hines, "Anomaly-based intrusion detection for SCADA systems," in Proc. 5th Int. Topical Meeting Nucl. Plant Instrum., Control Human Mach. Inter. Technol. (NPIC&HMIT), Albuquerque, NM, USA, Nov. 2006.
13. S. Rajasegarar, C. Leckie, and M. Palaniswami, "Anomaly detection in wireless sensor networks," in Proc. 10th IEEE Singapore Int. Conf. Commun. Syst., Oct. 2006, pp. 1-5.
14. M. S. Branicky, M. Cavusoglu, and V. Liberatore, "Multi-disciplinary challenges and directions in networked cyber-physical systems," in Proc. NSF Workshop Cyber-Phys. Syst., Austin, TX, USA, Oct. 2006.
15. T. H. Morris, A. K. Srivastava, B. Reaves, K. Pavurapu, S. Abdelwahed, R. Vaughn, W. McGrew, and Y. Dandass, "Engineering future cyberphysical energy systems: Challenges, research needs, and roadmap," in Proc. North American Power Symp., 2009, pp. 1-6.
16. C. Neuman, "Challenges in security for cyber-physical systems," in Proc. DHS Workshop Future Directions Cyber-Phys. Syst. Security, Newark, NJ, USA, Jul. 2009.
17. P. Pal, R. Schantz, K. Rohloff, and J. Loyall, "Cyber-physical systems security - Challenges and research ideas," in Proc. Workshop Future Directions Cyber-Physical Syst. Security, Jul. 2009.
18. C. Tricaud, "Optimal sensing and actuation policies for networked mobile agents in a class of cyber-physical systems," Ph.D. dissertation, Dept. Elect. Comput. Eng., Utah State Univ., Logan, UT, USA, Apr. 2010.
19. W. Elmenreich and H. De Meer, "Self-organizing networked systems for technical applications: A discussion on open issues," in Self-Organizing Systems, vol. 5343. Berlin, Germany: Springer, 2008, pp. 1-9.
20. F. Dressler, Self-Organization in Autonomous Sensor and Actuator Networks. New York, NY, USA: Wiley, 2007.
21. J. P. Hespanha, P. Naghshtabrizi, and Y. Xu, "A survey of recent results in networked control systems," Proc. IEEE, vol. 95, no. 1, pp. 138-162, Jan. 2007.
22. L. Schenato, B. Sinopoli, M. Franceschetti, K. Poolla, and S. S. Sastry, "Foundations of control and estimation over lossy networks," Proc. IEEE, vol. 95, no. 1, pp. 163-187, Jan. 2007.
23. M. Blanke, M. Kinnaert, J. Lunze, and M. Staroswiecki, Diagnosis and Fault-Tolerant Control. Berlin, Germany: Springer-Verlag, Sep. 2003.
24. R. Olfat-Saber, "Distributed Kalman filter with embedded consensus filter," in Proc. 44th IEEE Conf. Decis. Control Eur. Control Conf., Dec. 2005, pp. 8179-8184.
25. S. Han, E. Chang, L. Gao, and T. Dillon, "Taxonomy of attacks on wireless sensor networks," in Proc. 1st Eur. Conf. Comput. Netw. Defence, 2005, pp. 97-105.
26. A. D. Wood and J. A. Stankovic, "Denial of service in sensor networks," Computer, vol. 35, no. 10, pp. 54-62, 2002.
27. H. K. D. Sarma and A. Kar, "Security threats in wireless sensor network," in Proc. 40th Annu. IEEE Int. Carnahan Conf. Security Technol., Oct. 2006, pp. 243-251.
28. M. Bishop, Computer Security, Art and Science. Reading, MA, USA: Addison-Wesley, 2003.
29. N. W. Group. (2000, May). Internet security glossary [Online]. Available: http://rfc.net/rfc2828.html
30. K. Scarfone and P. Mell, "Guide to intrusion detection and prevention systems (IDPS)," Computer Security Resource Center, National Institute of Standards and Technology, Gaithersburg, MD, USA, Feb. 2007, Paper 800-94.
31. V. Chandola, A. Banerjee, and V. Kumar, "Anomaly detection: A survey," ACM Comput. Surveys, vol. 41, no. 3, pp. 15-58, Jul. 2009.
32. V. J. Hodge and J. Austin, "A survey of outlier detection methodologies," Artif. Intell. Rev., vol. 22, no. 2, pp. 85-126, 2004.
33. S. Rajasegarar, C. Leckie, M. Palaniswami, and J. C. Bezdek, "Distributed deviation detection in sensor networks," SIGMOD Rec., vol. 32, no. 4, pp. 77-82, Dec. 2003.
34. S. Subramaniam, T. Palpanas, D. Papadopoulos, V. Kalogeraki, and D. Gunopulos, "Online outlier detection in sensor data using non-parametric models," in Proc. 32nd Int. Conf. Very Large Data Bases, Sep. 2006, pp. 187-198.
35. S. Rajasegarar, C. Leckie, M. Palaniswami, and J. C. Bezdek, "Quarter sphere based distributed anomaly detection in wireless sensor networks," in Proc. IEEE Int. Conf. Commun., Oct. 2006, pp. 3864-3869.
36. M. Moshtaghi, S. Rajasegarar, C. Leckie, and S. Karunasekera, "Anomaly detection by clustering ellipsoids in wireless sensor networks," in Proc. Int. Conf. Intell. Sensors, Sensor Netw. Inf. Process., Dec. 2009, pp. 331-336.
37. T. Ahmed, M. Coates, and A. Lakhina, "Multivariate online anomaly detection using kernel recursive least squares," in Proc. 26th IEEE Int. Conf. Comput. Commun., May 2007, pp. 625-633.
38. F. Liu, X. Cheng, and D. Chen, "Insider attacker detection in wireless sensor networks," in Proc. 26th IEEE Int. Conf. Comput. Commun., May 2007, pp. 1937-1945.
39. I. Krontiris, T. Dimitriou, and F. C. Freiling, "Towards intrusion detection in wireless sensor networks," in Proc. 13th Eur. Wireless Conf., Apr. 2007.
40. I.-H. Bae, "A rough set based anomaly detection scheme considering the age of user profiles," in Computation Science, vol. 4490, Berlin, Germany: Springer, 2007, pp. 558-561.
41. N. Pham, T. Abdelzaher, and S. Nath, "On bounding data stream privacy in distributed cyber-physical systems," in Proc. IEEE Int. Conf. Sensor Netw., Ubiquitous, Trustworthy Comput., Jun. 2010, pp. 221-228.
42. L. Sha, S. Gopalakrishnan, X. Liu, and Q. Wang, "Cyber-physical systems: A new frontier," in Proc. 18th IEEE Int. Conf. Sensor Netw., Ubiquitous Trustworthy Comput., Jun. 2008, pp. 1-9.
43. W. R. Pires, Jr., T. H. de Paula Figueiredo, H. C. Wong, and A. A. F. Loureiro, "Malicious node detection in wireless sensor networks," in Proc. 18th Int. Parallel Distrib. Process. Symp., Apr. 2004.
44. I. Onat and A. Miri, "An intrusion detection system for wireless sensor networks," in Proc. IEEE Int. Conf. Wireless Mobile Comput., Netw. Commun., Aug. 2005, pp. 253-259.
45. D. Dallas, C. Leckie, and K. Ramamohanarao, "Hop-count monitoring: Detecting sinkhole attacks in wireless sensor networks," in Proc. 15th IEEE Int. Conf. Netw., Nov. 2007, pp. 176-181.
46. B. Yu and B. Xiao, "Detecting selective forwarding attacks in wireless sensor networks," in Proc. 20th Int. Parallel Distrib. Process. Symp., Apr. 2006.
47. C. Zimmer, B. Bhat, F. Mueller, and S. Mohan, "Time-based intrusion detection in cyber-physical systems," in Proc. 1st ACM/IEEE Int. Conf. Cyber-Physical Syst., Apr. 2010, pp. 109-118.
48. H. Tang and B. M. McMillin, "Security property violation in CPS through timing," in Proc. 28th Int. Conf. Distrib. Comput. Syst. Workshops, Jun. 2008, pp. 519-524.
49. C. Bellettini and J. L. Rrushi, "A product machine model for anomaly detection of interposition attacks on cyber-physical systems," in Proc. 23rd Int. Inform. Security Conf., vol. 278. 2008, pp. 285-300.
50. J. P. Anderson, Computer Security Threat Monitoring and Surveillance. Fort Washington, PA, USA: James P. Anderson Company, Apr. 1980.
51. M. Xie, S. Han, and B. Tian, "Anomaly detection in wireless sensor networks: A survey," J. Netw. Comput. Appl., vol. 34, no. 4, pp. 1302-1325, 2011.