What's under the hood? Improving SCADA security with process awareness

Justyna Joanna Chromik; Anne Katharina Ingrid Remke; Boudewijn R.H.M. Haverkort

doi:10.1109/CPSRSG.2016.7684100

What's under the hood? Improving SCADA security with process awareness

Justyna Joanna Chromik, Anne Katharina Ingrid Remke, Boudewijn R.H.M. Haverkort

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Scientific › peer-review

22 Citations (Scopus)

Abstract

SCADA networks are an essential part of monitoring and controlling physical infrastructures, such as the power grid. Recent news item show that tampering with the data exchanged in a SCADA network occurs and has severe consequences. A possible way of improving the security of SCADA networks is to use intrusion detection systems. By monitoring and analysing the traffic, it is possible to detect whether information has a legitimate source or was tampered with. However, in many cases the knowledge of just the traffic is not enough. Detecting intrusions could be improved by including awareness about the physical processes that are controlled. This paper shows a simple analysis of a small scenario of a power distribution system, to illustrate the benefits of including the knowledge about the process in detecting breaches in SCADA.

Original language	English
Title of host publication	Proceedings of the Joint Workshop on Cyber-physical Security and Resilience in Smart Grids (CPSR-SG 2016)
Place of Publication	USA
Publisher	Institute of Electrical and Electronics Engineers ( IEEE )
Pages	6
ISBN (Print)	9781509011650
DOIs	https://doi.org/10.1109/CPSRSG.2016.7684100
Publication status	Published - 12 Apr 2016
Externally published	Yes
Event	Joint Workshop on Cyber-physical Security and Resilience in Smart Grids 2016 - Vienna, Austria Duration: 12 Apr 2016 → …

Conference

Conference	Joint Workshop on Cyber-physical Security and Resilience in Smart Grids 2016
Abbreviated title	CPSR-SG 2016
Country/Territory	Austria
City	Vienna
Period	12/04/16 → …

Keywords

METIS-318500
IR-101864
EWI-27160

Access to Document

10.1109/CPSRSG.2016.7684100

Cite this

@inproceedings{cce5adb7620d45f499bf65982ca2e626,

title = "What's under the hood? Improving SCADA security with process awareness",

abstract = "SCADA networks are an essential part of monitoring and controlling physical infrastructures, such as the power grid. Recent news item show that tampering with the data exchanged in a SCADA network occurs and has severe consequences. A possible way of improving the security of SCADA networks is to use intrusion detection systems. By monitoring and analysing the traffic, it is possible to detect whether information has a legitimate source or was tampered with. However, in many cases the knowledge of just the traffic is not enough. Detecting intrusions could be improved by including awareness about the physical processes that are controlled. This paper shows a simple analysis of a small scenario of a power distribution system, to illustrate the benefits of including the knowledge about the process in detecting breaches in SCADA.",

keywords = "METIS-318500, IR-101864, EWI-27160",

author = "Chromik, {Justyna Joanna} and Remke, {Anne Katharina Ingrid} and Haverkort, {Boudewijn R.H.M.}",

note = "eemcs-eprint-27160; Joint Workshop on Cyber-physical Security and Resilience in Smart Grids 2016, CPSR-SG 2016 ; Conference date: 12-04-2016",

year = "2016",

month = apr,

day = "12",

doi = "10.1109/CPSRSG.2016.7684100",

language = "English",

isbn = "9781509011650",

pages = "6",

booktitle = "Proceedings of the Joint Workshop on Cyber-physical Security and Resilience in Smart Grids (CPSR-SG 2016)",

publisher = "Institute of Electrical and Electronics Engineers ( IEEE )",

}

Chromik, JJ, Remke, AKI & Haverkort, BRHM 2016, What's under the hood? Improving SCADA security with process awareness. in Proceedings of the Joint Workshop on Cyber-physical Security and Resilience in Smart Grids (CPSR-SG 2016). Institute of Electrical and Electronics Engineers ( IEEE ), USA, pp. 6, Joint Workshop on Cyber-physical Security and Resilience in Smart Grids 2016, Vienna, Austria, 12/04/16. https://doi.org/10.1109/CPSRSG.2016.7684100

What's under the hood? Improving SCADA security with process awareness. / Chromik, Justyna Joanna; Remke, Anne Katharina Ingrid; Haverkort, Boudewijn R.H.M.
Proceedings of the Joint Workshop on Cyber-physical Security and Resilience in Smart Grids (CPSR-SG 2016). USA: Institute of Electrical and Electronics Engineers ( IEEE ), 2016. p. 6.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Scientific › peer-review

TY - GEN

T1 - What's under the hood? Improving SCADA security with process awareness

AU - Chromik, Justyna Joanna

AU - Remke, Anne Katharina Ingrid

AU - Haverkort, Boudewijn R.H.M.

N1 - eemcs-eprint-27160

PY - 2016/4/12

Y1 - 2016/4/12

N2 - SCADA networks are an essential part of monitoring and controlling physical infrastructures, such as the power grid. Recent news item show that tampering with the data exchanged in a SCADA network occurs and has severe consequences. A possible way of improving the security of SCADA networks is to use intrusion detection systems. By monitoring and analysing the traffic, it is possible to detect whether information has a legitimate source or was tampered with. However, in many cases the knowledge of just the traffic is not enough. Detecting intrusions could be improved by including awareness about the physical processes that are controlled. This paper shows a simple analysis of a small scenario of a power distribution system, to illustrate the benefits of including the knowledge about the process in detecting breaches in SCADA.

AB - SCADA networks are an essential part of monitoring and controlling physical infrastructures, such as the power grid. Recent news item show that tampering with the data exchanged in a SCADA network occurs and has severe consequences. A possible way of improving the security of SCADA networks is to use intrusion detection systems. By monitoring and analysing the traffic, it is possible to detect whether information has a legitimate source or was tampered with. However, in many cases the knowledge of just the traffic is not enough. Detecting intrusions could be improved by including awareness about the physical processes that are controlled. This paper shows a simple analysis of a small scenario of a power distribution system, to illustrate the benefits of including the knowledge about the process in detecting breaches in SCADA.

KW - METIS-318500

KW - IR-101864

KW - EWI-27160

U2 - 10.1109/CPSRSG.2016.7684100

DO - 10.1109/CPSRSG.2016.7684100

M3 - Conference contribution

SN - 9781509011650

SP - 6

BT - Proceedings of the Joint Workshop on Cyber-physical Security and Resilience in Smart Grids (CPSR-SG 2016)

PB - Institute of Electrical and Electronics Engineers ( IEEE )

CY - USA

T2 - Joint Workshop on Cyber-physical Security and Resilience in Smart Grids 2016

Y2 - 12 April 2016

ER -

What's under the hood? Improving SCADA security with process awareness

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this