Control variable classification, modeling and anomaly detection in Modbus/TCP SCADA systems

Keywords

Modbus, SCADA, Anomaly detection, Parameterized complexity, Classifier (UML)

References

• Using Model-based Intrusion Detection for SCADA NetworksSteven W. Cheung, Bruno Dutertre, Martin Fong — 2006
• The State of the Art in Intrusion Prevention and DetectionAl‐Sakib Khan Pathan — 2014
• MELISSA: Towards Automated Detection of Undesirable User Actions in Critical InfrastructuresDina Hadiosmanovic, Damiano Bolzoni, Pieter Hartel — 2011
• On Testing Expansion in Bounded-Degree GraphsOded Goldreich, Dana Ron — 2000
• Accurate Modeling of The Siemens S7 SCADA Protocol For Intrusion Detection And Digital ForensicAmit Kleinmann, Avishai Wool — 2014
• Snort - Lightweight Intrusion Detection for NetworksMartin Roesch — 1999
• Modbus/DNP3 State-Based Intrusion Detection SystemIgor Nai Fovino, Andrea Carcano, Thibault De Lacheze Murel — 2010
• Outside the Closed World: On Using Machine Learning for Network Intrusion DetectionRobin Sommer, Vern Paxson — 2010
• On the Kolmogorov-Smirnov Test for Normality with Mean and Variance UnknownHubert W. Lilliefors — 1967
• On Indices of DispersionPaul G. Hoel — 1943
• A Test of Goodness of FitT. W. Anderson, D. A. Darling — 1954
• X. On the criterion that a given system of deviations from the probable in the case of a correlated system of variables is such that it can be reasonably supposed to have arisen from random samplingKarl Pearson — 2009
• Stuxnet: Dissecting a Cyberwarfare WeaponRalph Langner — 2011
• Detection, correlation, and visualization of attacks against critical infrastructure systemsLinda Briesemeister, Steven W. Cheung, Ulf Lindqvist — 2010
• Stuxnet, the real start of cyber warfare? [Editor's Note]Tom Chen — 2010
• Smart grids, smart cities need better networks [Editor's Note]Tom Chen — 2010
• Accurate modeling of Modbus/TCP for intrusion detection in SCADA systemsNiv Goldenberg, Avishai Wool — 2013
• Intrusion Monitoring in Process Control SystemsAlfonso Valdes, Steven W. Cheung — 2009
• Robustness of the Markov-chain model for cyber-attack detectionN. Ye, Yan Zhang, Connie M. Borror — 2004
• Exponential smoothing: The state of the artEverette S. Gardner — 1985

Cited by

• A SCADA Intrusion Detection Framework that Incorporates Process SemanticsJeyasingam Nivethan, Mauricio Papa — 2016
• Automatic Construction of Statechart-Based Anomaly Detection Models for Multi-Threaded Industrial Control SystemsAmit Kleinmann, Avishai Wool — 2016
• Intrusion detection in SCADA systems by traffic periodicity and telemetry analysisJiexin Zhang, Shaoduo Gan, Xiaoxue Liu — 2016
• Development of the EPICS-based monitoring and control system for EAST fast control power systemLi Shi, Y. Wang, Ying Chen — 2016
• Information Security Theory and PracticeSara Foresti, Javier López — 2016
• Automatic Construction of Statechart-Based Anomaly Detection Models for Multi-Threaded SCADA via Spectral AnalysisAmit Kleinmann, Avishai Wool — 2016
• Benchmarking electricity use of deep-level minesCharl Cilliers — 2016
• The Untilisation of Information Available in a Sensorless Control System of an AC Induction Motor for Condition MonitoringSamieh Abu Saad — 2015
• Field classification, modeling and anomaly detection in unknown CAN bus networksMoti Markovitz, Avishai Wool — 2017
• Network Anomaly Detection in Critical Infrastructure Based on Mininet Network SimulatorGiuseppe Bernieri, Federica Pascucci, Javier López — 2017
• Real-Time Intrusion Detection Method Based on Bidirectional Access of Modbus/TCP ProtocolXiaoshuai Xin, Cancheng Liu, Bin Wang — 2017
• A Novel LWCSO-PKM-Based Feature Optimization and Classification of Attack Types in SCADA NetworkDhanalakshmi Krishnan Sadhasivan, B. Kannapiran — 2017
• Intrusion Detection Method Based on Support Vector Machine Access of Modbus TCP ProtocolDeng Li, Yisong Peng, Cancheng Liu — 2016
• Stealthy Deception Attacks Against SCADA SystemsAmit Kleinmann, Ori Amichay, Avishai Wool — 2017
• Cybersecurity protection for power grid control infrastructuresJacek Jarmakiewicz, Krzysztof Parobczak, Krzysztof Maślanka — 2017
• A technique for bytecode decompilation of PLC programXuefeng Lv, Yaobin Xie, Xiaodong Zhu — 2017
• Design and PC implementation of a graphical interface for electric power management: Network management system of power distributionKarim Mansouri, Mouna Ben Hamed, Lassâad Sbita — 2016
• A New Burst-DFA model for SCADA Anomaly DetectionChen Markman, Avishai Wool, Álvaro A. Cárdenas — 2017
• From System Specification to Anomaly Detection (and back)Davide Fauri, Daniel Ricardo dos Santos, Elisa Costante — 2017
• Automation of control processes in specialized pyrolysis complexes based on web SCADA systemsYuriy Kondratenko, Oleksiy Kozlov, Oleksandr Gerasin — 2017

Related papers

• Modbus 기반 SCADA 해킹 테스트 시스템 설계송재구, 정성모, 김석수 — 2009
• Modbus-based SCADA systemMing Zhang — 2004
• A Modbus traffic generator for evaluating the security of SCADA systemsRami Al-Dalky, Omar Abduljaleel, Khaled Salah — 2014
• Supervisory Control and Data Acquisition Testbed Vulnerabilities and AttacksJohn Stranahan, Tapan Soni, Vahid Heydari — 2019
• An Evaluation of Machine Learning-based Anomaly Detection in a SCADA System Using the Modbus ProtocolBrandon Phillips, Eric Gamess, Sri Krishnaprasad — 2020
• Improvement of intrusion detection systems for critical infrastructuresMehmet Kursad Unal, Halil İbrahim Bülbül — 2017
• 파력-해상풍력 복합발전시스템의 IEC61850기반 통합 SCADA시스템 개발이재규, 이상엽, Tae Hyong Kim — 2016
• A Support Vector Machine-based Intrusion Detection Method for SCADA SystemZhang Teng-fe — 2015