NDLI: A SCADA Intrusion Detection Framework that Incorporates Process Semantics

Please wait, while we are loading the content...

PUF designed with Resistive RAM and Ternary States

Efficient Algorithm to Construct Perfect Secret Sharing Scheme for a Given Access Structure

Trusted Information Exchange Using Trusted Network Processors

An Algorithmic Method for the Implantation of Detection-Resistant Covert Hardware Trojans

Experimentation Support for Cyber Security Evaluations

A SCADA Intrusion Detection Framework that Incorporates Process Semantics

Anti-Censorship Framework using Mobile IPv6 based Moving Target Defense

HackAttack: Game-Theoretic Analysis of Realistic Cyber Conflicts

Dynamic Canary Randomization for Improved Software Security

Bringing Federated Identity to Grid Computing

A Cross-Domain Comparable Measurement Framework to Quantify Intrusion Detection Effectiveness

Addressing Critical Industrial Control System Cyber Security Concerns via High Fidelity Simulation

Forecasting Zero-Day Vulnerabilities

Practical implications and requirements of diversifying interpreted languages

GraphPrints: Towards a Graph Analytic Method for Network Anomaly Detection

Detection of Tunnels in PCAP Data by Random Forests

Double Helix and RAVEN: A System for Cyber Fault Tolerance and Recovery

Xen Network Flow Analysis for Intrusion Detection

Linear Cryptanalysis of Quasigroup Block Cipher

The Application of Moving Target Defense to Field Programmable Gate Arrays

Scalable Attack Graph Generation

Network Modeling for Security Analytics

Towards Selecting and Recommending Online Software Services by Evaluating External Attributes

QUALPUF: A Novel Quasi-Adiabatic Logic based Physical Unclonable Function

Classification of Insider Threat Detection Techniques

Security Resilience: Exploring Windows Domain-Level Defenses Against Post-Exploitation Authentication Attacks

A SCADA Intrusion Detection Framework that Incorporates Process Semantics

Content Provider	ACM Digital Library
Author	Papa, Mauricio Nivethan, Jeyasingam
Abstract	SCADA security is an increasingly important research area as these systems, used for process control and automation, are being exposed to the Internet due to their use of TCP/IP protocols as a transport mechanism for control messages. Most of the existing research work on SCADA systems has focused on addressing SCADA security by monitoring attacks or anomalies at the network level. The main issue affecting these systems today is that by focusing our attention on network-level monitoring needs, security practitioners may remain unaware of process level constraints. The proposed framework helps ensure that a mechanism is in place to help map process level constraints, as described by process engineers, to network level monitoring needs. Existing solutions have tried to address this problem but have not been able to fully bridge the gap between the process and the network. The goal of this research is to provide a solution that (i) leverages the knowledge process engineers have about the system (to help strengthen cyber security) and that has the ability to (ii) seamlessly monitors process constraints at the network level using standard network security tools. A prototype system for the Modbus TCP protocol and the Bro IDS has been built to validate the approach.
Starting Page	1
Ending Page	5
Page Count	5
File Format	PDF
ISBN	9781450337526
DOI	10.1145/2897795.2897814
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-04-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Process monitoring Intrusion detection Network security Scada security
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in