Behavior-based Intrusion Detection Approach deployed on a Naval Testbed - Archive ouverte HAL
Communication Dans Un Congrès Année : 2024

Behavior-based Intrusion Detection Approach deployed on a Naval Testbed

Résumé

This paper presents an application of an intrusion detection approach onto a naval physical testbed. The deployed approach is tailored for complex Industrial Control Systems (ICSs). Such systems play a critical role in managing complex industrial processes and ensuring their security against cyber threats is a major concern. Our work concerns Process-Aware Attacks (PAAs) which are sophisticated attacks aiming at disrupting ICS physical processes. The methodology instantiates a specification-based and process-aware Network Intrusion Detection System (NIDS). The specifications are systematically extracted from international and industry standards. In order to be monitored, such specifications are translated into security requirements which are verified during the execution of the system. Our IDS relies on network traffic capture on fieldbuses as well as Ethernet networks. In addition to our previous work, deploying our approach on a realistic naval testbed allows us to demonstrate its extensibility to different environments. Furthermore, the evaluation of our approach shows both its good detection capabilities and scalability.

Fichier sous embargo
Fichier sous embargo
0 9 18
Année Mois Jours
Avant la publication
lundi 13 octobre 2025
Fichier sous embargo
lundi 13 octobre 2025
Connectez-vous pour demander l'accès au fichier

Dates et versions

hal-04734038 , version 1 (13-10-2024)

Licence

Identifiants

  • HAL Id : hal-04734038 , version 1

Citer

Estelle Hotellier, Nahi Boukhobza, Franck Sicard, Julien Francq, Stéphane Mocanu. Behavior-based Intrusion Detection Approach deployed on a Naval Testbed. ETFA 2024 - 29th IEEE International Conference on Emerging Technologies and Factory Automation, Sep 2024, Padoue, Italy. pp.1-8. ⟨hal-04734038⟩
24 Consultations
1 Téléchargements

Partager

More