Intrusion Detection in SCADA Networks

R.R.R. Barbosa; Aiko Pras

doi:10.1007/978-3-642-13986-4_23

Intrusion Detection in SCADA Networks

R.R.R. Barbosa
, Aiko Pras

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

45 Citations (Scopus)

836 Downloads (Pure)

Abstract

Supervisory Control and Data Acquisition (SCADA) sys- tems are a critical part of large industrial facilities, such as water dis- tribution infrastructures. With the goal of reducing costs and increas- ing efficiency, these systems are becoming increasingly interconnected. However, this has also exposed them to a wide range of network security problems. Our research focus on the development of a novel flow-based intrusion detection system. Based on the assumption that SCADA net- works are well-behaved, we believe that it is possible to model the normal traffic by establishing relations between network flows. To improve ac- curacy and provide more information on the anomalous traffic, we will also research methods to derive a flow-based model for anomalous flows.

Original language	Undefined
Title of host publication	4th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2010)
Editors	Burckhard Stiller, Filip De Turck
Place of Publication	Berlin
Publisher	Springer
Pages	163-166
Number of pages	4
ISBN (Print)	978-3-642-13985-7
DOIs	https://doi.org/10.1007/978-3-642-13986-4_23
Publication status	Published - Jun 2010
Event	4th International Conference on Autonomous Infrastructure, Management and Security, AIMS 2010 - Zurich, Switzerland Duration: 23 Jun 2010 → 25 Jun 2010 Conference number: 4

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	6155

Conference

Conference	4th International Conference on Autonomous Infrastructure, Management and Security, AIMS 2010
Abbreviated title	AIMS 2010
Country/Territory	Switzerland
City	Zurich
Period	23/06/10 → 25/06/10

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 9 Industry, Innovation, and Infrastructure

Keywords

METIS-270983
IR-72612
EWI-18304
Intrusion Detection
SCADA

Access to Document

10.1007/978-3-642-13986-4_23

fulltext_(1)

Cite this

@inproceedings{1b78504c26c94426865d8042bced1ebd,

title = "Intrusion Detection in SCADA Networks",

abstract = "Supervisory Control and Data Acquisition (SCADA) sys- tems are a critical part of large industrial facilities, such as water dis- tribution infrastructures. With the goal of reducing costs and increas- ing efficiency, these systems are becoming increasingly interconnected. However, this has also exposed them to a wide range of network security problems. Our research focus on the development of a novel flow-based intrusion detection system. Based on the assumption that SCADA net- works are well-behaved, we believe that it is possible to model the normal traffic by establishing relations between network flows. To improve ac- curacy and provide more information on the anomalous traffic, we will also research methods to derive a flow-based model for anomalous flows.",

keywords = "METIS-270983, IR-72612, EWI-18304, Intrusion Detection, SCADA",

author = "R.R.R. Barbosa and Aiko Pras",

note = "10.1007/978-3-642-13986-4\_23 ; 4th International Conference on Autonomous Infrastructure, Management and Security, AIMS 2010 ; Conference date: 23-06-2010 Through 25-06-2010",

year = "2010",

month = jun,

doi = "10.1007/978-3-642-13986-4\_23",

language = "Undefined",

isbn = "978-3-642-13985-7",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "163--166",

editor = "Burckhard Stiller and \{De Turck\}, Filip",

booktitle = "4th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2010)",

address = "Germany",

}

Barbosa, RRR & Pras, A 2010, Intrusion Detection in SCADA Networks. in B Stiller & F De Turck (eds), 4th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2010). Lecture Notes in Computer Science, vol. 6155, Springer, Berlin, pp. 163-166, 4th International Conference on Autonomous Infrastructure, Management and Security, AIMS 2010, Zurich, Switzerland, 23/06/10. https://doi.org/10.1007/978-3-642-13986-4_23

Intrusion Detection in SCADA Networks. / Barbosa, R.R.R.; Pras, Aiko.
4th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2010). ed. / Burckhard Stiller; Filip De Turck. Berlin: Springer, 2010. p. 163-166 (Lecture Notes in Computer Science; Vol. 6155).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Intrusion Detection in SCADA Networks

AU - Barbosa, R.R.R.

AU - Pras, Aiko

N1 - Conference code: 4

PY - 2010/6

Y1 - 2010/6

N2 - Supervisory Control and Data Acquisition (SCADA) sys- tems are a critical part of large industrial facilities, such as water dis- tribution infrastructures. With the goal of reducing costs and increas- ing efficiency, these systems are becoming increasingly interconnected. However, this has also exposed them to a wide range of network security problems. Our research focus on the development of a novel flow-based intrusion detection system. Based on the assumption that SCADA net- works are well-behaved, we believe that it is possible to model the normal traffic by establishing relations between network flows. To improve ac- curacy and provide more information on the anomalous traffic, we will also research methods to derive a flow-based model for anomalous flows.

AB - Supervisory Control and Data Acquisition (SCADA) sys- tems are a critical part of large industrial facilities, such as water dis- tribution infrastructures. With the goal of reducing costs and increas- ing efficiency, these systems are becoming increasingly interconnected. However, this has also exposed them to a wide range of network security problems. Our research focus on the development of a novel flow-based intrusion detection system. Based on the assumption that SCADA net- works are well-behaved, we believe that it is possible to model the normal traffic by establishing relations between network flows. To improve ac- curacy and provide more information on the anomalous traffic, we will also research methods to derive a flow-based model for anomalous flows.

KW - METIS-270983

KW - IR-72612

KW - EWI-18304

KW - Intrusion Detection

KW - SCADA

U2 - 10.1007/978-3-642-13986-4_23

DO - 10.1007/978-3-642-13986-4_23

M3 - Conference contribution

SN - 978-3-642-13985-7

T3 - Lecture Notes in Computer Science

SP - 163

EP - 166

BT - 4th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2010)

A2 - Stiller, Burckhard

A2 - De Turck, Filip

PB - Springer

CY - Berlin

T2 - 4th International Conference on Autonomous Infrastructure, Management and Security, AIMS 2010

Y2 - 23 June 2010 through 25 June 2010

ER -