A Formally Reliable Cognitive Middleware for the Security of Industrial Control Systems

Electronics

卷:6

Dimitrios Serpanos¹  Muhammad Taimoor Khan²  Howard Shrobe³ 

[1] Industrial Systems Institute/RC-Athena & ECE, University of Patras, Patras GR 26504, Greece;

[2] Institute of Informatics, Alpen-Adria University, Klagenfurt A-9020, Austria;

[3] MIT CSAIL, Cambridge, MA 02139, USA;

关键词: run-time monitoring;    security monitor;    absence of false alarms;    ICS;    CPS;   

DOI  :  10.3390/electronics6030058

来源: DOAJ

【 摘 要 】

In this paper, we present our results on the formal reliability analysis of the behavioral correctness of our cognitive middleware ARMET. The formally assured behavioral correctness of a software system is a fundamental prerequisite for the system’s security. Therefore, the goal of this study is to, first, formalize the behavioral semantics of the middleware and, second, to prove its behavioral correctness. In this study, we focus only on the core and critical component of the middleware: the execution monitor. The execution monitor identifies inconsistencies between runtime observations of an industrial control system (ICS) application and predictions of the specification of the application. As a starting point, we have defined the formal (denotational) semantics of the observations (produced by the application at run-time), and predictions (produced by the executable specification of the application). Then, based on the formal semantices, we have formalized the behavior of the execution monitor. Finally, based on the semantics, we have proved soundness (absence of false alarms) and completeness (detection of arbitrary attacks) to assure the behavioral correctness of the monitor.

【 授权许可】

Unknown