Process-Aware Model-based Intrusion Detection System on Filtering Approach: Further Investigations - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Process-Aware Model-based Intrusion Detection System on Filtering Approach: Further Investigations

Résumé

Against new emerging cyber-threats targeting Industrial Control Systems (ICSs), Intrusion Detection Systems (IDSs) have emerged as viable solutions for implementing signature or behavioural approaches. The Security Approach based on Filter Execution (S.A.F.E.), a process-aware model-based IDS, deploys detection mechanisms through the implementation of command and report filters close to the process under control. Based on the S.A.F.E. approach, this paper proposes its improvement and novel contributions: a report filter modelling, optimization algorithms for speeding up the computation of the detection indicators and an implementation on a real testbed.
Fichier non déposé

Dates et versions

hal-02547697 , version 1 (20-04-2020)

Identifiants

Citer

Amaury Beaudet, Franck Sicard, Cédric Escudero, Éric Zamaï. Process-Aware Model-based Intrusion Detection System on Filtering Approach: Further Investigations. ICIT 2020 - IEEE International Conference on Industrial Technology, Feb 2020, Buenos Aires, Argentina. pp.310-315, ⟨10.1109/ICIT45562.2020.9067195⟩. ⟨hal-02547697⟩
42 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More