Efficient Mining of Temporal Safety Properties for Intrusion Detection in Industrial Control Systems - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

Efficient Mining of Temporal Safety Properties for Intrusion Detection in Industrial Control Systems

Résumé

Sophisticated process-aware attacks targeting industrial control systems require adequate detection measures taking into account the physical process. This paper proposes an approach relying on automatically mined process specifications to detect attacks on sequential control systems. The specifications are synthesized as monitors that read the execution traces and report violations to the operator. In contrast to other approaches, a central aspect of our method consists in reducing the number of mined specifications suffering from redundancies. We evaluate our approach on a hardware-in-the-loop testbed with a complex physical process model and discuss our approach's mining efficiency and attack detection capabilities.
Fichier principal
Vignette du fichier
safeprocess2018_v7.pdf (391.96 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01877109 , version 1 (21-09-2018)

Identifiants

  • HAL Id : hal-01877109 , version 1

Citer

Oualid Koucham, Stéphane Mocanu, Guillaume Hiet, Jean-Marc Thiriet, Frédéric Majorczyk. Efficient Mining of Temporal Safety Properties for Intrusion Detection in Industrial Control Systems. SAFEPROCESS 2018 - 10th IFAC Symposium on Fault Detection, Supervision and Safety for Technical Processes, Aug 2018, Varsovie, Poland. pp.1-8. ⟨hal-01877109⟩
814 Consultations
317 Téléchargements

Partager

Gmail Facebook X LinkedIn More