Trouble Brewing: Using Observations of Invariant Behavior to Detect Malicious Agency in Distributed Control Systems (original) (raw)

Lecture Notes in Computer Science, 2010

Abstract

Recent research on intrusion detection in supervisory data acquisition and control (SCADA) and DCS systems has focused on anomaly detection at protocol level based on the well-defined nature of traffic on such networks. Here, we consider attacks which compromise sensors or actuators (including physical manipulation), where intrusion may not be readily apparent as data and computational states can be controlled to give an appearance of normality, and sensor and control systems have limited accuracy. To counter these, we propose to consider indirect relations between sensor readings to detect such attacks through concurrent observations as determined by control laws and constraints.

richard mcevoy hasn't uploaded this paper.

Let richard know you want this paper to be uploaded.

Ask for this paper to be uploaded.