Model-based autonomic security management for cyber-physical infrastructures. (2016)

• Record Type: Journal Article
• Authors: Chen, Qian; Trivedi, Madhulika; Abdelwahed, Sherif; Morris, Thomas; Sheldon, Frederick
• Is Part Of: International journal of critical infrastructures. Volume 12:Number 4(2016)
• Page Start: 273
• Page End: 294
• Publication Date: 2016
• Subjects: autonomic computing -- self-protection -- SCADA security -- supervisory control -- data acquisition -- cyber attacks -- model-based security management -- cyber-physical infrastructures -- cyber-physical systems -- CPS -- critical infrastructures -- intrusion detection systems -- IDS -- unknown attack detection -- adaptive feedback -- gas pipelines; Infrastructure (Economics) -- Security measures -- Periodicals; Risk assessment -- Periodicals; Emergency management -- Periodicals; 363.05
• Languages: English
• ISSNs: 1475-3219

Abstract

Supervisory control and data acquisition (SCADA) systems, widely used in monitoring and controlling critical infrastructure systems, are highly vulnerable to cyber attacks. Current security solutions can protect SCADA systems from known cyber assaults, but most require human intervention. This paper presents a model-based autonomic security management (ASM) approach that monitors SCADA system performance and proactively predicts upcoming cyber attacks that may disrupt physical processes. We also discuss the feasibility of intrusion detection systems for laboratory-scale known and unknown attack detection. The ASM approach provides the most appropriate countermeasure recommendations, which may be deployed (semi-) autonomously based on an adaptive feedback mechanism. We present a gas pipeline case study and carry out function code scanning and malicious parameter injection attacks to validate the self-protection feature. Experimental results show that the ASM approach strengthens the SCADA system security, reduces protection time delays and toward achieving normal operations with little or no human intervention.