A brief survey of security approaches for cyber-physical systems

2016 8th IFIP International Conference on New Technologies, Mobility and Security, NTMS 2016

Volumn , Issue , 2016, Pages

  Bou Harb, Elias ^a  

^a FLORIDA ATLANTIC UNIVERSITY   (United States)

Author keywords

Control theoretic; Cyber security; Cyber physical systems; Survey

Indexed keywords

EMBEDDED SYSTEMS; SURVEYING; SURVEYS;

CYBER SECURITY; CYBER-PHYSICAL SYSTEMS (CPS); RESEARCH COMMUNITIES; RESEARCH GAPS; SECURITY APPROACH; SECURITY ASPECTS; SECURITY SOLUTIONS;

CYBER PHYSICAL SYSTEM;

EID: 85011264054     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NTMS.2016.7792424     Document Type: Conference Paper

References (45)

1. Xu Li, Rongxing Lu, Xiaohui Liang, Xuemin Shen, Jiming Chen, and Xiaodong Lin. Smart community: An internet of things application. Communications Magazine, IEEE, 49(11):68-75, 2011.
2. Ragunathan Raj Rajkumar, Insup Lee, Lui Sha, and John Stankovic. Cyber-physical systems: the next computing revolution. In Proceedings of the 47th Design Automation Conference, pages 731-736. ACM, 2010.
3. Kyoung-Dae Kim and Panganamala R Kumar. Cyber-physical systems: A perspective at the centennial. Proceedings of the IEEE, 100(Special Centennial Issue):1287-1308, 2012.
4. Jay Taneja, Randy Katz, and David Culler. Defining cps challenges in a sustainable electricity grid. In Proceedings of the 2012 IEEE/ACM Third International Conference on Cyber-Physical Systems, pages 119-128. IEEE Computer Society, 2012.
5. Insup Lee, Oleg Sokolsky, Sanjian Chen, John Hatcliff, Eunkyoung Jee, BaekGyu Kim, Andrew King, Margaret Mullen-Fortino, Soojin Park, Alexander Roederer, et al. Challenges and research directions in medical cyber-physical systems. Proceedings of the IEEE, 100(1):75-90, 2012.
6. Hamza Fawzi, Paulo Tabuada, and Suhas Diggavi. Secure estimation and control for cyber-physical systems under adversarial attacks. Automatic Control, IEEE Transactions on, 59(6):1454-1467, 2014.
7. Yilin Mo, Tiffany Hyun-Jin Kim, Kenneth Brancik, Dona Dickinson, Heejo Lee, Adrian Perrig, and Bruno Sinopoli. Cyber-physical security of a smart grid infrastructure. Proceedings of the IEEE, 100(1):195-209, 2012.
8. Yao Liu, Peng Ning, and Michael K Reiter. False data injection attacks against state estimation in electric power grids. ACM Transactions on Information and System Security (TISSEC), 14(1):13, 2011.
9. Henrik Sandberg, André Teixeira, and Karl H Johansson. On security indices for state estimators in power networks. In First Workshop on Secure Control Systems (SCS), Stockholm, 2010, 2010.
10. Fabio Pasqualetti, Florian Dorfler, and Francesco Bullo. Attack detection and identification in cyber-physical systems. Automatic Control, IEEE Transactions on, 58(11):2715-2729, 2013.
11. Yilin Mo, Rohan Chabukswar, and Bruno Sinopoli. Detecting integrity attacks on scada systems. Control Systems Technology, IEEE Transactions on, 22(4):1396-1407, 2014.
12. Miroslav Pajic, Shreyas Sundaram, George J Pappas, and Rahul Mangharam. The wireless control network: A new approach for control over networks. Automatic Control, IEEE Transactions on, 56(10):2305-2318, 2011.
13. Shreyas Sundaram and Christoforos N Hadjicostis. Distributed function calculation via linear iterative strategies in the presence of malicious agents. Automatic Control, IEEE Transactions on, 56(7):1495-1508, 2011.
14. Yilin Mo, Emanuele Garone, Alessandro Casavola, and Bruno Sinopoli. False data injection attacks against state estimation in wireless sensor networks. In Decision and Control (CDC), 2010 49th IEEE Conference on, pages 5967-5972. IEEE, 2010.
15. A. Teixeira, I. Shames, H. Sandberg, and K.H. Johansson. A secure control framework for resource-limited adversaries. Automatica, 51:135-148, 2015.
16. Y. Mo, S. Weerakkody, and B. Sinopoli. Physical au thentication of control systems: Designing watermarked control inputs to detect counterfeit sensor outputs. Control Systems, IEEE, 35(1):93-109, Feb 2015.
17. S. Weerakkody and B. Sinopoli. Detecting integrity attacks on control systems using a moving target approach. Decision and Control (CDC), 2015 IEEE 54th Annual Conference on, pages-, Dec 2015.
18. Carlo Bellettini and Julian L Rrushi. Vulnerability analysis of scada protocol binaries through detection of memory access taintedness. In Information Assurance and Security Workshop, 2007. IAW'07. IEEE SMC, pages 341-348. IEEE, 2007.
19. Eric J Byres, Dan Hoffman, and Nate Kube. On shaky ground - a study of security vulnerabilities in control protocols. Proc. 5th American Nuclear Society Int. Mtg. on Nuclear Plant Instrumentation, Controls, and HMI Technology, 2006.
20. Albert Treytl, Thilo Sauter, and Christian Schwaiger. Security measures for industrial fieldbus systems-state of the art and solutions for ip-based approaches. In Factory Communication Systems, 2004. Proceedings. 2004 IEEE International Workshop on, pages 201-209. IEEE, 2004.
21. Steven Cheung, Bruno Dutertre, Martin Fong, Ulf Lindqvist, Keith Skinner, and Alfonso Valdes. Using model-based intrusion detection for scada networks. In Proceedings of the SCADA security scientific symposium, volume 46, pages 1-12. Citeseer, 2007.
22. Niv Goldenberg and Avishai Wool. Accurate modeling of modbus/tcp for intrusion detection in scada systems. International Journal of Critical Infrastructure Protection, 6(2):63-75, 2013.
23. Man-Ki Yoon and Gabriela F Ciocarlie. Communication pattern monitoring: Improving the utility of anomaly detection for industrial control systems. In NDSS Workshop on Security of Emerging Networking Technologies, 2014.
24. Stephen E McLaughlin, Saman A Zonouz, Devin J Pohly, and Patrick Drew McDaniel. A trusted safety verifier for process controller code. In NDSS, 2014.
25. Sibin Mohan et al. S3a: secure system simplex architecture for enhanced security of cyber-physical systems. arXiv preprint arXiv:1202.5722, 2012.
26. Helge Janicke, Andrew Nicholson, Stuart Webber, and Antonio Cau. Runtime-monitoring for industrial control systems. Electronics, 4(4):995-1017, 2015.
27. Saman Zonouz, Julian Rrushi, and Steve McLaughlin. Detecting industrial control malware using automated plc code analytics. Security & Privacy, IEEE, 12(6):40-47, 2014.
28. Jan-Ole Malchow, Daniel Marzin, Johannes Klick, Robert Kovacs, and Volker Roth. Plc guard: A practical defense against attacks on cyber-physical systems. In Communications and Network Security (CNS), 2015 IEEE Conference on, pages 326-334. IEEE, 2015.
29. Dina Hadžiosmanović et al. Through the eye of the plc: semantic security monitoring for industrial processes. In Proceedings of the 30th ACSAC, pages 126-135. ACM, 2014.
30. Marco Caselli, Emmanuele Zambon, Jonathan Petit, and Frank Kargl. Modeling message sequences for intrusion detection in industrial control systems. In Critical Infrastructure Protection IX, pages 49-71. Springer, 2015.
31. Stephen E McLaughlin. On dynamic malware payloads aimed at programmable logic controllers. In HotSec, 2011.
32. Stephen McLaughlin and Patrick McDaniel. Sabot: specification-based payload generation for programmable logic controllers. In Proceedings of the 2012 ACM conference on Computer and communications security, pages 439-449. ACM, 2012.
33. Düssel et al. Cyber-critical infrastructure protection using real-time payload-based anomaly detection. In Critical Information Infrastructures Security, pages 85-97. Springer, 2009.
34. Abdulmohsen Almalawi, Xinghuo Yu, Zahir Tari, Adil Fahad, and Ibrahim Khalil. An unsupervised anomalybased detection approach for integrity attacks on scada systems. Computers & Security, 46:94-110, 2014.
35. Wei Gao, Thomas Morris, Bradley Reaves, and Drew Richey. On scada control system command and response injection and intrusion detection. In eCrime Researchers Summit (eCrime), 2010, pages 1-9. IEEE, 2010.
36. Quickdraw SCADA IDS. http://www.digitalbond.com/tools/quickdraw/.
37. Andreas Paul, Franka Schuster, and Hartmut König. Towards the protection of industrial control systems-conclusions of a vulnerability analysis of profinet io. In Detection of Intrusions and Malware, and Vulnerability Assessment, pages 160-176. Springer, 2013.
38. Martin Roesch et al. Snort: Lightweight intrusion detection for networks. In LISA, volume 99, pages 229-238, 1999.
39. Robert Mitchell and Ing-Ray Chen. Specification based intrusion detection for unmanned aircraft systems. In Proceedings of the first ACM MobiHoc workshop on Airborne Networks and Communications, pages 31-36. ACM, 2012.
40. Robert Mitchell and Ray Chen. On survivability of mobile cyber physical systems with intrusion detection. Wireless personal communications, 68(4):1377-1391, 2013.
41. Kyungseo et al. Abnormal human behavioral pattern detection in assisted living environments. In Proceedings of the 3rd International Conference on PErvasive Technologies Related to Assistive Environments, page 9. ACM, 2010.
42. Sooyeon Shin, Taekyoung Kwon, Gil-Yong Jo, Youngman Park, and Haekyu Rhy. An experimental study of hierarchical intrusion detection for wireless industrial sensor networks. Industrial Informatics, IEEE Transactions on, 6(4):744-757, 2010.
43. Upeka Kanchana Premaratne, Jagath Samarabandu, Tarlochan S Sidhu, Robert Beresh, and Jian-Cheng Tan. An intrusion detection system for iec61850 automated substations. Power Delivery, IEEE Transactions on, 25(4):2376-2383, 2010.
44. Jared Verba and Michael Milvich. Idaho national laboratory supervisory control and data acquisition intrusion detection system (scada ids). In Technologies for Homeland Security, 2008 IEEE Conference on, pages 469-473. IEEE, 2008.
45. Jianhua Shi, Jiafu Wan, Hehua Yan, and Hui Suo. A survey of cyber-physical systems. In Wireless Communications and Signal Processing (WCSP), 2011 International Conference on, pages 1-6. IEEE, 2011.