A Review of SCADA Anomaly Detection Systems

作者: Iñaki Garitano , Roberto Uribeetxeberria , Urko Zurutuza

DOI: 10.1007/978-3-642-19644-7_38

关键词:

摘要: The security of critical infrastructures is decreasing due to the apparition new cyber threats against Supervisory Control and Data Acquisition (SCADA) systems. evolution they have experienced; use standard hardware software components or increase interconnected devices in order reduce costs improve efficiency, contributed this. This work reviews research effort done towards development anomaly detection for these specific SCADA systems a number peculiarities that make perform better than traditional information communications technology (ICT) networks. are deterministic, their operation model often cyclical. Based on this premise, modeling normal behavior by mining features gets feasible.

参考文章(18)
Bruno Dutertre, Steven Cheung, Martin Fong, Alfonso Valdes, Ulf Lindqvist, Keith Skinner, Using Model-based Intrusion Detection for SCADA Networks ,(2006)
Terran Lane, Carla E Brodley, An Application of Machine Learning to Anomaly Detection ,(1999)
Sushil Jajodia, Daniel Barbará, Ningning Wu, DETECTING NOVEL NETWORK INTRUSIONS USING BAYES ESTIMATORS siam international conference on data mining. pp. 0- 0 ,(2001)
Julian Rrushi, Roy Campbell, Detecting Cyber Attacks On Nuclear Power Plants international conference on critical infrastructure protection. ,vol. 290, pp. 41- 54 ,(2008) , 10.1007/978-0-387-88523-0_4
Robert Cunningham, Steven Cheung, Martin Fong, Ulf Lindqvist, David Nicol, Ronald Pawlowski, Eric Robinson, William Sanders, Sankalp Singh, Alfonso Valdes, Bradley Woodworth, Michael Zhivich, Securing current and future process control systems international conference on critical infrastructure protection. pp. 99- 115 ,(2007) , 10.1007/978-0-387-75462-8_8
Jesus Gonzalez, Mauricio Papa, Passive Scanning in Modbus Networks international conference on critical infrastructure protection. pp. 175- 187 ,(2007) , 10.1007/978-0-387-75462-8_13
Henrik Christiansson, Eric Luiijf, Creating a European SCADA Security Testbed international conference on critical infrastructure protection. pp. 237- 247 ,(2007) , 10.1007/978-0-387-75462-8_17
Francesco Oliviero, Claudio Mazzariello, Dario Salvi, Salvatore D'Antonio, A Distributed multi-purpose IP flow monitor ,(2005)
Jordi Cucurull, Mikael Asplund, Simin Nadjm-Tehrani, Anomaly detection and mitigation for disaster area networks recent advances in intrusion detection. pp. 339- 359 ,(2010) , 10.1007/978-3-642-15512-3_18