NDLI: Blocking unsafe behaviors in control systems through static and dynamic policy enforcement

Content Provider	IEEE Xplore Digital Library
Author	McLaughlin, S.
Copyright Year	2015
Description	Author affiliation: KNOX Security, Samsung Res. America, USA (McLaughlin, S.)
Abstract	One of the most universally accepted practices in computer security is the use of security policy enforcement. Under a policy enforcement regime, users and programs can only perform actions for which they are authorized by the security policy. Unfortunately, modern control systems fail to make effective use of policy enforcement. In many cases, privilege in control systems is binary-a single password is sufficient to gain most or all privileges within the system. In this paper, we consider the benefits and challenges of enforcing security policies for code running on Programmable Logic Controllers (PLCs). We first summarize two of our previous approaches, which place no trust in the PLC to behave correctly. While these approaches show promise, especially for current PLC architectures, they are lacking in comparison to approaches based on a trustworthy PLC design. Thus, we argue that future PLCs should implement a Trusted Computing Base (TCB). Such a TCB is a small set of trusted hardware and software that is sufficient for enforcing policies directly on the PLC. We also propose a method of doing policy enforcement on PLCs supporting a small TCB, and argue that it is the simpler and more effective means of doing policy enforcement for PLCs. We conclude that future PLCs should support a small TCB.
Starting Page	1
Ending Page	6
File Size	218517
Page Count	6
File Format	PDF
ISBN	9781479980529
DOI	10.1145/2744769.2747913
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-06-08
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Association for Computing Machinery, Inc. (ACM)
Subject Keyword	Safety Control systems Security Organizations Runtime Monitoring Machinery
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Blocking unsafe behaviors in control systems through static and dynamic policy enforcement

Security enforcement aware software development.

Direct Static Enforcement of High-Level Security Policies ABSTRACT

Corrective Enforcement: A New Paradigm of Security Policy Enforcement by Monitors

Efficient runtime-enforcement techniques for policy weaving

Efficient runtime policy enforcement using counterexample-guided abstraction refinement.

Rewriting-based security enforcement of concurrent systems: A formal approach

NetODESSA: Dynamic Policy Enforcement in Cloud Networks

Safety Guard: Runtime Enforcement for Safety-Critical Cyber-Physical Systems: Invited

Blocking unsafe behaviors in control systems through static and dynamic policy enforcement

Similar Documents

Blocking unsafe behaviors in control systems through static and dynamic policy enforcement

Security enforcement aware software development.

Direct Static Enforcement of High-Level Security Policies ABSTRACT

Corrective Enforcement: A New Paradigm of Security Policy Enforcement by Monitors

Efficient runtime-enforcement techniques for policy weaving

Efficient runtime policy enforcement using counterexample-guided abstraction refinement.

Rewriting-based security enforcement of concurrent systems: A formal approach

NetODESSA: Dynamic Policy Enforcement in Cloud Networks

Safety Guard: Runtime Enforcement for Safety-Critical Cyber-Physical Systems: Invited

Blocking unsafe behaviors in control systems through static and dynamic policy enforcement