NDLI: CPAC: securing critical infrastructure with cyber-physical access control

Please wait, while we are loading the content...

Formal security analysis of smart embedded systems

ELAR: extremely lightweight auditing and repairing for cloud security

Decomposition of MAC address structure for granular device inference

Life-experience passwords (LEPs)

Catching predators at watering holes: finding and understanding strategically compromised websites

Code obfuscation against symbolic execution attacks

On the (in)security of the latest generation implantable cardiac defibrillators and how to secure them

Theft-resilient mobile wallets: transparently authenticating NFC users with tapping gesture biometrics

Practical and secure dynamic searchable encryption via oblivious access on distributed data structure

ShieldFS: a self-healing, ransomware-aware filesystem

You can promote, but you can't hide: large-scale abused app detection in mobile app stores

Inferring browser activity and status through remote monitoring of storage usage

VTPin: practical VTable hijacking protection for binaries

Reliably determining data leakage in the presence of strong attackers

A security analysis of automated chinese turing tests

Spicy: a unified deep packet inspection framework for safely dissecting all your data

An ultra-lightweight white-box encryption scheme for securing resource-constrained IoT devices

Pileus: protecting user resources from vulnerable cloud services

Timing-based reconnaissance and defense in software-defined networks

Using image saliency and regions of interest to encourage stronger graphical passwords

The Achilles heel of OAuth: a multi-platform study of OAuth-based authentication

VulPecker: an automated vulnerability detection system based on code similarity analysis

Multi-receiver GPS spoofing detection: error models and realization

Gametrics: towards attack-resilient behavioral authentication with simple cognitive games

CoKey: fast token-based cooperative cryptography

Cypider: building community-based cyber-defense infrastructure for android malware detection

Swords and shields: a study of mobile game hacks and existing defenses

Amplifying side channels through performance degradation

LMP: light-weighted memory protection with hardware assistance

Sanitizing data is not enough!: towards sanitizing structural artifacts in flash media

The cross domain desktop compositor: using hardware-based video compositing for a multi-level secure user interface

Trace-free memory data structure forensics via past inference and future speculations

A multi-cloud based privacy-preserving data publishing scheme for the internet of things

Bootstrapping and maintaining trust in the cloud

RevProbe: detecting silent reverse proxies in malicious server infrastructures

CPAC: securing critical infrastructure with cyber-physical access control

Adaptive encrypted traffic fingerprinting with bi-directional dependence

EvilCoder: automated bug insertion

Location-enhanced authentication using the IoT: because you cannot be in two places at once

Device fingerprinting for augmenting web authentication: classification and analysis of methods

The cloudier side of cryptographic end-to-end verifiable voting: a security analysis of Helios

Intelligent, automated red team emulation

Understanding and defending the binder attack surface in Android

Efficient, adversarial neighbor discovery using logical channels on Microsoft Azure

FASE: functionality-aware security enforcement

Auror: defending against poisoning attacks in collaborative deep learning systems

CASTLE: CA signing in a touch-less environment

HERCULE: attack story reconstruction via community discovery on correlated log graph

CPAC: securing critical infrastructure with cyber-physical access control

Content Provider	ACM Digital Library
Author	Etigowni, Sriharsha Butler, Kevin Zonouz, Saman Tian, Dave Jing Hernandez, Grant
Abstract	Critical infrastructure such as the power grid has become increasingly complex. The addition of computing elements to traditional physical components increases complexity and hampers insight into how elements in the system interact with each other. The result is an infrastructure where operational mistakes, some of which cannot be distinguished from attacks, are more difficult to prevent and have greater potential impact, such as leaking sensitive information to the operator or attacker. In this paper, we present CPAC, a cyber-physical access control solution to manage complexity and mitigate threats in cyber-physical environments, with a focus on the electrical smart grid. CPAC uses information flow analysis based on mathematical models of the physical grid to generate policies enforced through verifiable logic. At the device side, CPAC combines symbolic execution with lightweight dynamic execution monitoring to allow non-intrusive taint analysis on programmable logic controllers in realtime. These components work together to provide a realtime view of all system elements, and allow for more robust and finer-grained protections than any previous solution to securing the grid. We implement a prototype of CPAC using Bachmann PLCs and evaluate several real-world incidents that demonstrate its scalability and effectiveness. The policy checking for a nation-wide grid is less than 150 ms, faster than existing solutions. We additionally show that CPAC can analyze potential component failures for arbitrary component failures, far beyond the capabilities of currently deployed systems. CPAC thus provides a solution to secure the modern smart grid from operator mistakes or insider attacks, maintain operational privacy, and support N - x contingencies.
Starting Page	139
Ending Page	152
Page Count	14
File Format	PDF
ISBN	9781450347716
DOI	10.1145/2991079.2991126
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-12-05
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Handbook on Securing Cyber-Physical Critical Infrastructure

A Middleware Architecture for Securing Ubiquitous Computing Cyber Infrastructures (2004)

A Middleware Architecture for Securing Ubiquitous Computing Cyber Infrastructures (2004)

Cyber Security Incidents on Critical Infrastructure and Industrial Networks

Securing Remote Access to Information Systems of Critical Infrastructure Using Two-Factor Authentication

Cyber-Physical Systems Attestation

Techniques for securing substation automation systems.

Risk Assessment of Cyber Access to Physical Infrastructure in Cyber-Physical Systems

Securing critical infrastructure

CPAC: securing critical infrastructure with cyber-physical access control

Similar Documents

Handbook on Securing Cyber-Physical Critical Infrastructure

A Middleware Architecture for Securing Ubiquitous Computing Cyber Infrastructures (2004)

A Middleware Architecture for Securing Ubiquitous Computing Cyber Infrastructures (2004)

Cyber Security Incidents on Critical Infrastructure and Industrial Networks

Securing Remote Access to Information Systems of Critical Infrastructure Using Two-Factor Authentication

Cyber-Physical Systems Attestation

Techniques for securing substation automation systems.

Risk Assessment of Cyber Access to Physical Infrastructure in Cyber-Physical Systems

Securing critical infrastructure

CPAC: securing critical infrastructure with cyber-physical access control