A Plant-Wide Industrial Process Control Security Problem

Richard Mcevoy, Stephen D. Wolthusen

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Industrial control systems are a vital part of the critical infrastructure. The potentially large impact of a failure makes them attractive targets for adversaries. Unfortunately, simplistic approaches to intrusion detection using protocol analysis or naïve statistical estimation techniques are inadequate in the face of skilled adversaries who can hide their presence with the appearance of legitimate actions.
This paper describes an approach for identifying malicious activity that involves the use of a path authentication mechanism in combination with state estimation for anomaly detection. The approach provides the ability to reason conjointly over computational structures, and operations and physical states. The well-known Tennessee Eastman reference problem is used to illustrate the efficacy of the approach.
Original languageEnglish
Title of host publicationCritical Infrastructure Protection V
Subtitle of host publicationProceedings of the 5th Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection
PublisherSpringer-Verlag
Pages47-56
ISBN (Print)978-3-642-24863-4
DOIs
Publication statusPublished - 2011

Cite this