Behavior rule specification-based intrusion detection for safety critical medical cyber physical systems

IEEE Transactions on Dependable and Secure Computing

Volumn 12, Issue 1, 2015, Pages 16-30

  Mitchell, Robert ^a   Chen, Ing Ray ^a  

^a VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CYBER PHYSICAL SYSTEM; EMBEDDED SYSTEMS; SAFETY ENGINEERING; SPECIFICATIONS;

BEHAVIOR RULES; BEHAVIOR SPECIFICATIONS; COMPARATIVE ANALYSIS; FALSE POSITIVE; HIGH DETECTION PROBABILITY; MEDICAL CYBER PHYSICAL SYSTEMS; MEDICAL DEVICES; PERVASIVE HEALTHCARE APPLICATION;

INTRUSION DETECTION;

EID: 84921327876     PISSN: 15455971     EISSN: 19410018     Source Type: Journal    
DOI: 10.1109/TDSC.2014.2312327     Document Type: Article

References (36)

1. H. Al-Hamadi and I. R. Chen, "Redundancy management of multipath routing for intrusion tolerance in heterogeneous wireless sensor networks," IEEE Trans. Netw. Service Manage., vol. 10, no. 2, pp. 189-203, Jun. 2013.
2. M. Anand, E. Cronin, M. Sherr, M. Blaze, Z. Ives, and I. Lee, "Security challenges in next generation cyber physical systems," Beyond SCADA: Netw. Embedded Control for Cyber Phys. Syst., Pittsburgh, PA, USA, Nov. 2006.
3. B. Asfaw, D. Bekele, B. Eshete, A. Villafiorita, and K. Weldemariam, "Host-based anomaly detection for pervasive medical systems," in Proc. 5th Int. Conf. Risks Security Internet Syst., Oct. 2010, pp. 1-8.
4. F. Bao, I. Chen, M. Chang, and J.H. Cho, "Trust-based intrusion detection in wireless sensor networks," in Proc. IEEE Int. Conf. Commun., Jun. 2011, pp. 1-6.
5. F. Bao, I. R. Chen, M. Chang, and J. H. Cho, "Hierarchical trust management for wireless sensor networks and its applications to trust-based routing and intrusion detection," IEEE Trans. Netw. Service Manage., vol. 9, no. 2, pp. 169-183, Jun. 2012.
6. F. B. Bastani, I. R. Chen, and T. W. Tsao, "Reliability of systems with fuzzy-failure criterion," in Proc. Annu. Rel. Maintainability Symp., Anaheim, CA, USA, Jan. 1994, pp. 442-448.
7. A. Carcano, A. Coletta, M. Guglielmi, M. Masera, I. Fovino, and A. Trombetta, "A multidimensional critical state analysis for detecting intrusions in SCADA systems," IEEE Trans. Ind. Inf., vol. 7, no. 2, pp. 179-186, May 2011.
8. A. C-Ardenas, S. Amin, B. Sinopoli, A. Giani, A. Perrig, and S. Sastry, "Challenges for securing cyber physical systems," in Proc. 1st Workshop Cyber-Phys. Syst. Security DHS, 2009, pp. 1-4.
9. I. R.ChenandF. B. Bastani, "Effectof artificial-intelligenceplanningprocedures on system reliability," IEEE Trans. Rel., vol. 40, no. 3, pp.364-369,Aug.1991.
10. I. R. Chen, F. B. Bastani, and T. W. Tsao, "On the reliability of AI planning software in real-time applications," IEEE Trans. Knowl. Data Eng., vol. 7, no. 1, pp. 4-13, Feb. 1995.
11. I. R. Chen and T. H. Hsi, "Performance analysis of admission control algorithms based on reward optimization for real-time multimedia servers," Perform. Eval., vol. 33, no. 2, pp. 89-112, 1998.
12. I. R. Chen, A. P. Speer, and M. Eltoweissy, "Adaptive fault tolerant QOS control algorithms for maximizing system lifetime of query-based wireless sensor networks," IEEE Trans. Dependable Secure Comput., vol. 8, no. 2, pp. 161-176, Mar./Apr. 2011.
13. I. R. Chen and D. C. Wang, "Analysis of replicated data with repair dependency," The Comput. J., vol. 39, no. 9, pp. 767-779, 1996.
14. I. R. Chen and D. C. Wang, "Analyzing dynamic voting using petri nets," in Proc. 15th IEEE Symp. Rel. Distrib. Syst., Niagara Falls, Canada, Oct. 1996, pp. 44-53.
15. S.-T. Cheng, C.-M. Chen, and I. R. Chen, "Dynamic quota-based admission control with sub-rating in multimedia servers," Multimedia Syst., vol. 8, no. 2, pp. 83-91, 2000.
16. S.-T. Cheng, C.-M. Chen, and I. R. Chen, "Performance evaluation of an admission control algorithm: Dynamic threshold with negotiation," Perform. Eval., vol. 52, no. 1, pp. 1-13, 2003.
17. S. Cheung, B. Dutertre, M. Fong, U. Lindqvist, K. Skinner, and A. Valdes, "Using model-based intrusion detection for SCADA networks," in Proc. SCADA Secur. Sci. Symp., Miami, FL, USA, Jan. 2007, pp. 127-134.
18. J. H. Cho, I. R. Chen, and P. G. Feng, "Effect of intrusion detection on reliability of mission-oriented mobile group systems in mobile ad hoc networks," IEEE Trans. Rel., vol. 59, no. 1, pp. 231-241, Mar. 2010.
19. J.-H. Cho, A. Swami, and I.-R. Chen, "Modeling and analysis of trust management for cognitive mission-driven group communication systems in mobile ad hoc networks," in Proc. Int. Conf. Comput. Sci. Eng., Aug. 2009, pp. 641-650.
20. J.-H. Cho, A. Swami, and I. R. Chen, "Modeling and analysis of trust management with trust chain optimization in mobile ad hoc networks," J. Netw. Comput. Appl., vol. 35, no. 3, pp. 1001-1012, 2012.
21. A. daSilva, M. H. T. Martins, B. P. S. Rocha, A. A. F. Loureiro, L. B. Ruiz, and H. C. Wong, "Decentralized intrusion detection in wireless sensor networks," in Proc. 1st ACM Int. Workshop Quality Service Security Wireless Mobile Netw., 2005, pp. 16-23.
22. B. Dutertre, "Formal modeling and analysis of the Modbus protocol," in Proc. Critical Infrastructure Protection, 2007, pp. 189-204.
23. B. Gu and I. R. Chen, "Performance analysis of location-Aware mobile service proxies for reducing network cost in personal communication systems," ACM Mobile Netw. Appl., vol. 10, no. 4, pp. 453-463, 2005.
24. K. Ioannis, T. Dimitriou, and F. Freiling, "Towards intrusion detection in wireless sensor networks," in Proc. 13th Eur. Wireless Conf., 2007, pp. 1-7.
25. I. Lee and O. Sokolsky, "Medical cyber physical systems," in Proc. 47th ACM Des. Autom. Conf., 2010, pp. 743-748.
26. Y. Li and I. R. Chen, "Design and performance analysis of mobility management schemes based on pointer forwarding for wireless mesh networks," IEEE Trans. Mobile Comput., vol. 10, no. 3, pp. 349-361, Mar. 2011.
27. R. Mitchell and I. R. Chen, "Effect of intrusion detection and response on reliability of cyber physical systems," IEEE Trans. Rel., vol. 62, no. 1, pp. 199-210, Mar. 2013.
28. K. Park, Y. Lin, V. Metsis, Z. Le, and F. Makedon, "Abnormal human behavioral pattern detection in assisted living environments," in Proc. 3rd ACM Int. Conf. Pervasive Technol. Related Assist. Environ., 2010, pp. 9:1-9:8.
29. P. Porras and P. Neumann, "EMERALD: Event monitoring enabling responses to anomalous live disturbances," in Proc. 20th Nat. Inf. Syst. Security Conf., 1997, pp. 353-365.
30. S. M. Ross, Introduction to Probability Models, 10th ed. New York, NY, USA: Academic, 2009.
31. E. Tapia, S. Intille, and K. Larson, "Activity recognition in the home using simple and ubiquitous sensors," in Pervasive Computing. "Lecture Notes in Computer Science", vol. 3001, A. Ferscha, F. Mattern, Eds., Berlin, Germany, Springer, 2004, pp. 158-175.
32. C.-H. Tsang and S. Kwong, "Multi-Agent intrusion detection system in industrial network using ant colony clustering approach and unsupervised feature extraction," in Proc. IEEE Int. Conf. Ind. Tech., Dec. 2005, pp. 51-56.
33. K. Venkatasubramanian and S. K. S. Gupta, "Security solutions for pervasive healthcare," Security in Distributed, Grid, Mobile, and Pervasive Computing, New York, NY, USA: Auerbach, 2007.
34. W.-S. Yang and S.-Y. Hwang, "A process-mining framework for the detection of healthcare fraud and abuse," Expert Syst. Appl., vol. 31, no. 1, pp. 56-68, 2006.
35. O. Yilmaz and I. R. Chen, "Utilizing call admission control for pricing optimization of multiple service classes in wireless cellular networks," Comput. Commun., vol. 32, no. 2, pp. 317-323, 2009.
36. C. Zimmer, B. Bhat, F. Mueller, and S. Mohan, "Time-based intrusion detection in cyber-physical systems," in Proc. 1st ACM/IEEE Int. Conf. Cyber-Phys. Syst., 2010, pp. 109-118.