NDLI: Attacks against process control systems: risk assessment, detection, and response

Please wait, while we are loading the content...

Improved Nguyen-Vidick heuristic sieve algorithm for shortest vector problem

Automatic construction of jump-oriented programming shellcode (on the x86)

Identity-based online/offline key encapsulation and encryption

Enhancing the trust of internet routing with lightweight route attestation

Tracer: enforcing mandatory access control in commodity OS with the support of light-weight intrusion detection and tracing

WebPatrol: automated collection and replay of web-based malware scenarios

Secure mobile subscription of sensor-encrypted data

Threshold ring signature without random oracles

Extended cubes: enhancing the cube attack by extracting low-degree non-linear equations

A software-based root-of-trust primitive on multicore platforms

On the security of the identity-based encryption based on DHIES from ASIACCS 2010

Quantified risk-adaptive access control for patient privacy protection in health information systems

Stronger security model of group key agreement

MLAS: multiple level authentication scheme for VANETs

Towards mechanisms for detection and prevention of data exfiltration by insiders: keynote talk paper

Jump-oriented programming: a new class of code-reuse attack

Compact identity-based encryption without strong symmetric cipher

Network scan detection with LQS: a lightweight, quick and stateful algorithm

Confidentiality-preserving proof theories for distributed proof systems

Malware propagation in online social networks: nature, dynamics, and defense implications

Efficient audit-based compliance for relational data retention

On the invisibility of designated confirmer signatures

Attack on the GridCode one-time password

An ontology- and Bayesian-based approach for determining threat probabilities

How to design space efficient revocable IBE from non-monotonic ABE

EASiER: encryption-based access control in social networks with efficient revocation

Leakage resilient eCK-secure key exchange protocol without random oracles

On mouse dynamics as a behavioral biometric for authentication

ROPdefender: a detection tool to defend against return-oriented programming attacks

Strongly secure certificateless key exchange without pairing

An integrated approach to cryptographic mitigation of denial-of-service attacks

PUF ROKs: a hardware approach to read-once keys

Characterizing kernel malware behavior with kernel data access patterns

Mind how you answer me!: transparently authenticating the user of a smartphone when answering or placing a call

Bounded vector signatures and their applications

Rethinking about guessing attacks

Attacks against process control systems: risk assessment, detection, and response

Multi-authority ciphertext-policy attribute-based encryption with accountability

Diesel: applying privilege separation to database access

Efficient computational oblivious transfer using interactive hashing

On the effectiveness of anonymizing networks for web search privacy

Examining indistinguishability-based security models for key exchange protocols: the case of CK, CK-HMQV, and eCK

Boosting the scalability of botnet detection using adaptive traffic sampling

Efficient symbolic automated analysis of administrative attribute-based RBAC-policies

Detecting stealthy malware with inter-structure and imported signatures

Practical affiliation-hiding authentication from improved polynomial interpolation

Formal modelling and automatic detection of resource exhaustion attacks

Non-uniform distributions in quantitative information-flow

1-out-of-2 signature

Separation of duties as a service

Optimal message transmission protocols with flexible parameters

Self destructive tamper response for software protection

An efficient mobile PACE implementation

Self-certified ring signatures

Receipt-mode trust negotiation: efficient authorization through outsourced interactions

How to search linear approximation for large non-surjective S-box

Deriving common malware behavior through graph clustering

Server-aided signatures verification secure against collusion attack

A new and extended fault analysis on RSA

Towards a binary integrity system for windows

A statistical approach to botnet virulence estimation

Attacks against process control systems: risk assessment, detection, and response

Content Provider	ACM Digital Library
Author	Amin, Saurabh Huang, Yu-Lun Huang, Chi-Yen Cárdenas, Alvaro A. Sastry, Shankar Lin, Zong-Syun
Abstract	In the last years there has been an increasing interest in the security of process control and SCADA systems. Furthermore, recent computer attacks such as the Stuxnet worm, have shown there are parties with the motivation and resources to effectively attack control systems. While previous work has proposed new security mechanisms for control systems, few of them have explored new and fundamentally different research problems for securing control systems when compared to securing traditional information technology (IT) systems. In particular, the sophistication of new malware attacking control systems--malware including zero-days attacks, rootkits created for control systems, and software signed by trusted certificate authorities--has shown that it is very difficult to prevent and detect these attacks based solely on IT system information. In this paper we show how, by incorporating knowledge of the physical system under control, we are able to detect computer attacks that change the behavior of the targeted control system. By using knowledge of the physical system we are able to focus on the final objective of the attack, and not on the particular mechanisms of how vulnerabilities are exploited, and how the attack is hidden. We analyze the security and safety of our mechanisms by exploring the effects of stealthy attacks, and by ensuring that automatic attack-response mechanisms will not drive the system to an unsafe state. A secondary goal of this paper is to initiate the discussion between control and security practitioners--two areas that have had little interaction in the past. We believe that control engineers can leverage security engineering to design--based on a combination of their best practices--control algorithms that go beyond safety and fault tolerance, and include considerations to survive targeted attacks.
Starting Page	355
Ending Page	366
Page Count	12
File Format	PDF
ISBN	9781450305648
DOI	10.1145/1966913.1966959
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2011-03-22
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Cyber-physical systems Ids Control systems Security Scada Critical infrastructure protection
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in