Runtime-monitoring for industrial control systems

Electronics

Volumn 4, Issue 4, 2015, Pages 995-1017

  Janicke, Helge ^a   Nicholson, Andrew ^b   Webber, Stuart ^a   Cau, Antonio ^c  

^a DE MONTFORT UNIVERSITY   (United Kingdom)

^b UNIVERSITY OF WARWICK   (United Kingdom)

^c NONE   (United Kingdom)

Author keywords

Cyber; Formal methods; ICS; ITL; Monitoring; Run time; SCADA; Security

Indexed keywords

EID: 84958150271     PISSN: None     EISSN: 20799292     Source Type: Journal    
DOI: 10.3390/electronics4040995     Document Type: Article

References (42)

1. Abrams, M.; Weiss, J. Malicious Control System Cyber Security Attack Case Study: Maroochy Water Services, Australia; The MITRE Corporation: McLean, VA, USA, 2008.
2. Langner, R. Stuxnet: Dissecting a cyberwarfare weapon. IEEE Secur. Priv. 2011, 9, 49–51.
3. Zetter, K. A Cyberattack Has Caused Confirmed Physical Damage for the Second Time Ever. 2015. Available online: http://www.wired.com/2015/01/german-steel-mill-hack-destruction/ (accessed on 1 May 2015).
4. Nicholson, A.; Webber, S.; Dyer, S.; Patel, T.; Janicke, H. SCADA security in the light of Cyber-Warfare. Comput. Secur. 2012, 31, 418–436.
5. Radvanovsky, B.; Brodsky, J. InformationWeek.com. 2013. Available online: http://www.informationweek.co.uk/government/security/thousands-of-industrial-control-systems/240146091 (accessed on 2 May 2013).
6. Bodenheim, R.; Butts, J.; Dunlap, S.; Mullins, B. Evaluation of the ability of the Shodan search engine to identify Internet-facing industrial control devices. Int. J. Crit. Infrastruct. Prot. 2014, 7, 114–123.
7. Knowles, W.; Prince, D.; Hutchison, D.; Disso, J.F.P.; Jones, K. A survey of cyber security management in industrial control systems. Int. J. Crit. Infrastruct. Prot. 2015, 9, 52–80.
8. Zetter, K. Hoping to Teach a Lesson, Researchers Release Exploits for Critical Infrastructure Software; 2012. Available online: http://www.wired.com/2012/01/scada-exploits/ (accessed on 5 April 2013).
9. ICS-CERT. ICS-CERT Monitor Newsletter. 2015. Available online: https://ics-cert.us-cert.gov/si tes/default/files/Monitors/ICS-CERT_Monitor_Sep2014-Feb2015.pdf (accessed on 3 September 2015).
10. Euractiv. EU, US go separate ways on cybersecurity; 2013. Available online: http://www.euractiv.com/specialreport-cybersecurity/eu-us-set-different-approach-cyb-news-518252 (accessed on 3 May 2013).
11. Her Majesty’s Government. A Strong Britain in an Age of Uncertainty: The National Security Strategy; Her Majesty’s Government: London, UK, 2010.
12. Zhu, B.; Sastry, S. SCADA—Specific intrusion detection/prevention systems: A survey and taxonomy. In Proceedings of the 1st Workshop on Secure Control Systems (SCS), Stockholm, Sweden, 12 April 2010.
13. Maglaras, L.A.; Jiang, J.; Cruz, T.J. Integrated OCSVM Mechanism for intrusion detection in SCADA systems. Electron. Lett. 2014, 50, 1935–1936.
14. Hadziosmanovic, D.; Sommer, R.; Zambon, E.; Hartel, P. Through the Eye of the PLC: Towards Semantic Security Monitoring for Industrial Control Systems; Technical Report; International Computer Science Institute: Berkeley, CA, USA, 2013.
15. Cau, A.; Moszkowski, B.; Zedan, H. The ITL homepage; 2015. Available online: http://antonio-ca u.co.uk/ITL/ (accessed on 15 October 2015).
16. Leucker, M.; Schallhart, C. A brief account of runtime verification. J. Logic Algebraic Program. 2009, 78, 293–303.
17. Nicholson, A.; Janicke, H.; Cau, A. Position Paper: Safety and Security Monitoring in ICS/SCADA Systems. In Proceedings of the 2nd International Symposium on Industrial Control System and SCADA Cyber Security Research (ICS-CSR’14), St Polten, Austria, 11–12 September 2014.
18. Yang, D.; Usynin, A.; Hines, J.W. Anomaly-based intrusion detection for SCADA systems. In Proceedings of the 5th International Topical Meeting on Nuclear Plant Instrumentation, Control and Human Machine Interface Technologies (NPIC&HMIT 05), Albuquerque, NM, USA, 12–16 November 2006; pp. 12–16.
19. Igure, V.M.; Laughter, S.A.; Williams, R.D. Security issues in SCADA networks. Comput. Secur. 2006, 25, 498–506.
20. Cheung, S.; Dutertre, B.; Fong, M.; Lindqvist, U.; Skinner, K.; Valdes, A. Using model-based intrusion detection for SCADA networks. In Proceedings of the SCADA Security Scientific Symposium, Miami, FL, USA, 23–25 June 2007; pp. 1–12.
21. McLaughlin, S.; McDaniel, P. SABOT: specification-based payload generation for programmable logic controllers. In Proceedings of the 2012 ACM Conference on Computer And Communications Security (ACM), Raleigh, NC, USA, 16–18 October 2012; pp. 439–449.
22. Mohan, S.; Bak, S.; Betti, E.; Yun, H.; Sha, L.; Caccamo, M. S3A: Secure System Simplex Architecture for Enhanced Security of Cyber-Physical Systems; Cornel University: Ithaca, NY, USA, 2012.
23. Gordon, M.; Hurd, J.; Slind, K. Executing the Formal Semantics of the Accellera Property Specification Language by Mechanised Theorem Proving. In Correct Hardware Design and Verification Methods; Lecture Notes in Computer Science; Springer: Berlin, Germany, 2003; Volume 2860; pp. 200–215.
24. Gheorghita, S.V.; Grigore, R. Constructing checkers from PSL properties. In Proceedings of the 15th International Conference on Control Systems and Computer Science, Bucharest, Romania, 15 May 2005; pp. 757–762.
25. Boule, M.; Zilic, Z. Efficient Automata-Based Assertion-Checker Synthesis of SEREs for Hardware Emulation. In Proceedings of the 2007 Asia and South Pacific Design Automation Conference (ASP-DAC’07), Pacifico Yokohama, Japan, 23–26 January 2007; IEEE Computer Society: Washington, DC, USA, 2007; pp. 324–329.
26. Finkbeiner, B.; Sipma, H. Checking Finite Traces Using Alternating Automata. Form. Methods Syst. Des. 2004, 24, 101–127.
27. Jin, N.; Shen, C.; Chen, J.; Ni, T. Engineering of An Assertion-based PSLSimple-Verilog Dynamic Verifier by Alternating Automata. Electron. Notes Theor. Comput. Sci. 2008, 207, 153–169.
28. Tabakov, D.; Vardi, M.Y. Optimized temporal monitors for SystemC. In Proceedings of the First International Conference on Runtime Verification (RV’10), St. Julians, Malta, 1–4 November 2010; Springer-Verlag: Berlin, Germany, 2010; pp. 436–451.
29. Zhou, S.; Zedan, H.; Cau, A. Run-time analysis of time-critical systems. J. Syst. Arch. 2005, 51, 331–345.
30. Havelund, K.; Rosu, G. Efficient monitoring of safety properties. Int. J. Softw. Tools Technol. Transf. 2004, 6, 158–173.
31. Rosu, G.; Havelund, K. Rewriting-Based Techniques for Runtime Verification. Autom. Softw. Eng. 2005, 12, 151–197.
32. Barringer, H.; Rydeheard, D.E.; Havelund, K. Rule Systems for Run-time Monitoring: From Eagle to RuleR. J. Logic. Comput. 2010, 20, 675–706.
33. Kristoffersen, K.J.; Pedersen, C.; Andersen, H.R. Runtime Verification of Timed LTL using Disjunctive Normalized Equation Systems. Electronic Notes Theor. Comput. Sci. 2003, 89, 210–225.
34. Rosu, G.; Havelund, K. Synthesizing Dynamic Programming Algorithms From Linear Temporal Logic Formulae; Technical Report; Automated Software Engineering Group, NASA Ames Research Center: Mountain View, CA, USA, 2001.
35. Williams, T. The Purdue enterprise reference architectur. Comput. Ind. 1994, 24, 141–158.
36. United States Department of Homeland Security, U.D. Recommended Practice: Improving Industrial Control Systems Cybersecurity with Defense-In-Depth Strategie; United States Department of Homeland Security: Washington, DC, USA, 2009.
37. Pacific Northwest National Laboratory, U.S. Department of Energy. The Role of Authenticated Communications for Electric Power Distribution; Pacific Northwest National Laboratory, U.S. Department of Energy: Washington, DC, USA, 2006.
38. CPNI. Security for Industrial Control systems, Good practice guide. 2015. Available online: https://www.cpni.gov.uk/Documents/Publications/2015/12-May-2015-SICS%20-%20Framework %20Overview%20Final%20v1%202.pdf (accessed on 15 July 2015)
39. Cau, A.; Zedan, H.; Coleman, N.; Moszkowski, B.C. Using ITL and Tempura for large scale specification and simulation. In Proceedings of the 4th Euromicro Workshop on Parallel and Distributed Processing, Braga, Portugues, 24–26 January 1996.
40. Moszkowski, B. Executing Temporal Logic Programs; Cambridge University Press: Cambridge, UK, 1986.
41. Hale, R.W.S. Programming in Temporal Logic. Ph.D. Thesis, The Trinity College, University of Cambridge: Cambridge, UK, 1988.
42. Moszkowski, B. Compositional Reasoning Using Interval Temporal Logic and Tempura. In Compositionality: The Significant Difference; Roever, W.P.D., Langmaack, H., Pnueli, A., Eds.; Springer Verlag: Berlin, Germany, 1998; Volume 1486, pp. 439–464.