期刊
IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING
卷 13, 期 2, 页码 252-260出版社
IEEE COMPUTER SOC
DOI: 10.1109/TDSC.2015.2443793
关键词
Networked control systems; nonlinear network analysis; control systems; intrusion detection; telemetry
Until recently, industrial control systems (ICSs) used air-gap security measures, where every node of the ICS network was isolated from other networks, including the Internet, by a physical disconnect. Attaching ICS networks to the Internet benefits companies and engineers who use them. However, as these systems were designed for use in the air-gapped security environment, protocols used by ICSs contain little to no security features and are vulnerable to various attacks. This paper proposes an approach to detect the intrusions into network attached ICSs by measuring and verifying data that is transmitted through the network but is not inherently the data used by the transmission protocol-network telemetry. Using simulated PLC units, the developed IDS was able to achieve 94.3 percent accuracy when differentiating between machines of an attacker and engineer on the same network, and 99.5 percent accuracy when differentiating between attacker and engineer on the Internet.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据