Industrial Control System Monitoring Based on Communication Profile

JOURNAL OF CHEMICAL ENGINEERING OF JAPAN

Ichiro Koshijima¹  Masato Koike¹  Tomomi Aoyama¹  Masafumi Matta¹  Hidemasa Naruoka¹  Yoshihiro Hashimoto¹  Wataru Machii¹ 

[1] Nagoya Institute of Technology

关键词: Industrial Control System;    Cyber Security;    Network Monitoring;    Communication Profile;   

DOI  :  10.1252/jcej.14we323

来源: Maruzen Company Ltd

【 摘 要 】

References(7)Industrial control systems (ICS) have hidden vulnerabilities that cannot be usually solved by IT security tools, because of their 24 h 365 d non-stop, non-update and non-patch operation. There is, however, very limited report of cyber-attacks, so that owners of critical infrastructures do not have much attention for their ICS protection. This is a kind of misunderstanding of the current situation caused by a lacking of capability to detect a cyber-intrusion. In order to apply an Intrusion Detection System (IDS), it is difficult to make the complete white list of communication packets, and it is also difficult to perform anomaly detection by checking the payload of packet one by one. This paper defines characteristics of communication in the ICS network and proposes a methodology to visualize the ICS network behavior. An illustrative example of pseudo cyber-attack is also prepared for understanding our proposed method.

【 授权许可】

Unknown