Conference In: orcid
FingerCI
generating specifications for critical infrastructures
Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing
— 2022
Key information
Authors:
Published in
April 25, 2022
Abstract
Cyber-physical attacks on critical infrastructures (CI) or industrial control systems (ICS) can compromise the integrity and operability of physical systems, potentially damaging critical facilities. Specification-based Intrusion Detection Systems (IDSs) can detect those attacks but often require an accurate specification of the monitored ICS, which is often a deterrent to their usage. This paper presents FingerCI, a solution to automatically generate a model of an ICS, which we name a fingerprint, based on network traffic inspection, business process discovery, and physical behaviour analysis. An airport baggage handling system testbed shows that the fingerprints can be used to configure specification-based IDS with high accuracy results, reducing the amount of effort required to use that detection approach.
Publication details
Authors in the community:
Filipe Miguel Marcos Apolinário
ist170571
Miguel Filipe Leitão Pardal
ist14265
Miguel Nuno Dias Alves Pupo Correia
ist130598
Title of the publication container
Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing
Location of the conference
New York, NY, USA
Fields of Science and Technology (FOS)
computer-and-information-sciences - Computer and information sciences
Publication language (ISO code)
eng - English
Rights type:
Only metadata available