Facilitating Protocol-independent Industrial Intrusion Detection Systems

ACM SIGSAC Conference on Computer and Communications Security (CCS), pp. 2105–2107

Abstract

Cyber-physical systems are increasingly threatened by sophisticated attackers, also attacking the physical aspect of systems. Supplementing protective measures, industrial intrusion detection systems promise to detect such attacks. However, due to industrial protocol diversity and lack of standard interfaces, great efforts are required to adapt these technologies to a large number of different protocols. To address this issue, we identify existing universally applicable intrusion detection approaches and propose a transcription for industrial protocols to realize protocol-independent semantic intrusion detection on top of different industrial protocols.

Authors 3

1. Konrad Wolsing Aachen Fraunhofer FKIE &

   RWTH Aachen University · Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE & RWTH Aachen University, Wachtberg, Germany

2. Eric Wagner

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE, Wachtberg, Germany

3. Martin Henze

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE, Wachtberg, Germany