Improving network security monitoring for industrial control systems

Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015

Volumn , Issue , 2015, Pages 878-881

  Cruz, Tiago ^a   Barrigas, Jorge ^a   Proenca, Jorge ^a   Graziano, Antonio ^b   Panzieri, Stefano ^c   Lev, Leonid ^d   Simoes, Paulo ^a  

^a UNIVERSITY OF COIMBRA   (Portugal)

^b Selex ES   (Italy)

^c ROMA TRE UNIVERSITY   (Italy)

^d ISRAEL ELECTRIC CORPORATION   (Israel)

Author keywords

Critical Infrastructure Protection; Industrial Control Systems; Programmable Logic Controllers; SCADA

Indexed keywords

CHEMICAL EQUIPMENT; COMPUTER CIRCUITS; CONTROLLERS; COSTS; CRITICAL INFRASTRUCTURES; ELECTRIC POWER SYSTEM CONTROL; NETWORK MANAGEMENT; PROCESS CONTROL; PROGRAMMABLE LOGIC CONTROLLERS; PROGRAMMED CONTROL SYSTEMS; PUBLIC WORKS; SCADA SYSTEMS;

COMMUNICATION MECHANISMS; CRITICAL INFRASTRUCTURE PROTECTION; INDUSTRIAL CONTROL SYSTEMS; POWER DISTRIBUTION GRIDS; PROGRAMMABLE LOGIC CONTROLLERS (PLC); REMOTE TERMINAL UNITS; SCADA; SECURITY MONITORING;

NETWORK SECURITY;

EID: 84942683814     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INM.2015.7140399     Document Type: Conference Paper

References (25)

1. MICIE, FP7-ICT-SEC-2007-1 Project 225353, http://www.micie.eu.
2. CockpitCI, FP7-SEC-2011-1 Project 285647, http://CockpitCI.eu.
3. D. Bailey, E Wright, "Practical SCADA for Industry (IDC Technology)", Elsevier Press, 2003, ISBN 978-0750658058.
4. Electronic Industries Alliance, "Electrical Characteristics of Generators and Receivers for Use in Balanced Multipoint Systems", EIA Std. RS-485, 1983.
5. International Standards Organization, ISO 11898-1:2003, "Road vehicles-Controller area network (CAN)-Part 1", 2003.
6. International Electrotechnical Commission, P-IEC/PAS 62407, 1.0, "Real-time Ethernet control automation technology (EtherCAT)", 2005.
7. PROFIBUS &PROFINET International (PI), www.profibus.com.
8. Modbus-IDA, "Modbus Application Protocol Specification 1.1b", 2006.
9. International Electrotechnical Commission, "Telecontrol equipment and systems-Part 5-104: Transmission protocols-Network access for IEC 60870-5-101 using standard transport profiles", 2006
10. IEEE, std 1815-2010, "IEEE Standard for Electric Power Systems Communications-Distributed Network Protocol (DNP3)", doi: 10.1109/IEEESTD.2010.5518537, July 2010.
11. V. Igure, S. Laughter, R. Williams, "Security issues in SCADA networks", Elsevier Computers &Security Journal, Volume 25, Issue 7, Pages 498-506, doi:10.1016/j.cose.2006.03.001, 2006.
12. B. Zhu, A. Joseph, and S. Sastry, "A taxonomy of cyber attacks on SCADA systems," in Proc. of the 2011 International Conference on Internet of Things and 4th International Conference on Cyber, Physical and Social Computing, 2011, pp. 380-388.
13. R. Evans, "Process Control System Cyber Security Standards-An Overview", in Proc. of 52nd International Instrumentation Symposium, 2006, Cleveland, USA.
14. Ralf Langner, "To Kill a Centrifugue: A Technical Analysis of What Stuxnet's Creators Tried to Achieve", The Langner Group, 2013.
15. International Society of Automation, "ISA-99.00.01: Security for Industrial Automation and Control Systems-Part 1: Terminology, Concepts, and Models", October 2007.
16. Microchip Inc., "MCP3004/3008: 2.7V 4-Channel/8-Channel 10-Bit A/D Converters with SPI Serial Interface", Data Sheet, 2008
17. Simple Event Correlator Project, http://simple-evcorr.sourceforge.net/.
18. Raspberry Pi Foundation, http://www.raspberrypi.org.
19. H. Debar, D. Curry, B. Feinstein "RFC 4765: The intrusion detection message exchange format (IDMEF)", March 2007.
20. R. Fielding, "Architectural Styles and the Design of Network-Based Software Architectures", Ph.D. Dissertation, Univ. of California,, 2000.
21. J. Brown, B. Martin, "How fast is fast enough? Choosing between Xenomai and Linux for real-time applications", in Proc. of the 12th OSADL Real-Time Linux Workshop, 25-27, Nairobi, Kenya.
22. LXC Project, "Linux Containers: Userspace tools for the Linux kernel containers", https://linuxcontainers.org.
23. H. Philip, "Who Watches the Watcher?", August 2012, http://pi.gadgetoid.com/article/who-watches-The-watcher
24. J. Ma, S. Perkins, "Time-series novelty detection using one-class support vector machines", in Proc. of the International Joint Conference on Neural Networks, pp. 1741-1745, July 2003.
25. L. Maglaras, J. Jiang, T. Cruz, "Integrated OCSVM mechanism for intrusion detection in SCADA systems", IET Electronics Letters, vol. 50, pp. 1935-1936, 2014, doi: 10.1049/el.2014.2897.