Awareness and reaction strategies for critical infrastructure protection. (October 2015)

• Record Type: Journal Article
• Authors: Cazorla, Lorena; Alcaraz, Cristina; Lopez, Javier
• Is Part Of: Computers & electrical engineering. Volume 47(2015)
• Page Start: 299
• Page End: 317
• Publication Date: 2015-10
• Subjects: Critical infrastructure protection -- Control systems -- Countermeasures -- Intrusion detection and response systems; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2015.08.010
• Languages: English
• ISSNs: 0045-7906

Abstract

Highlights: We study IDPRS solutions for CIP, considering their components and constraints. We design a methodological framework for IDPRS solutions within critical scenarios. ICS need automated intelligent solutions for early detection and protection. Current IDPRS solutions for CIP lack automatic active reaction mechanisms. We give recommendations for adaptation or development of IDPRS solutions for CIP. Abstract: Current Critical Infrastructures (CIs) need intelligent automatic active reaction mechanisms to protect their critical processes against cyber attacks or system anomalies, and avoid the disruptive consequences of cascading failures between interdependent and interconnected systems. In this paper we study the Intrusion Detection, Prevention and Response Systems (IDPRS) that can offer this type of protection mechanisms, their constituting elements and their applicability to critical contexts. We design a methodological framework determining the essential elements present in the IDPRS, while evaluating each of their sub-components in terms of adequacy for critical contexts. We review the different types of active and passive countermeasures available, categorizing them and assessing whether or not they are suitable for Critical Infrastructure Protection (CIP). Through our study we look at different reaction systems and learn from them how to better create IDPRS solutions for CIP.