'Known Secure Sensor Measurements' for Critical Infrastructure Systems: Detecting Falsification of System State
This paper describes a first investigation on a low cost and low false alarm, reliable mechanism for detecting manipulation of critical physical processes and falsification of system state. We call this novel mechanism Known Secure Sensor Measurements (KSSM). The method moves beyond analysis of network traffic and host based state information, in fact it uses physical measurements of the process being controlled to detect falsification of state. KSSM is intended to be incorporated into the design of new, resilient, cost effective critical infrastructure control systems. It can also be included in incremental upgrades of already in- stalled systems for enhanced resilience. KSSM is based on known secure physical measurements for assessing the likelihood of an attack and will demonstrate a practical approach to creating, transmitting, and using the known secure measurements for detection.
- Research Organization:
- Idaho National Lab. (INL), Idaho Falls, ID (United States)
- Sponsoring Organization:
- USDOE
- DOE Contract Number:
- DE-AC07-05ID14517
- OSTI ID:
- 1023459
- Report Number(s):
- INL/CON-11-21607; TRN: US201118%%1039
- Resource Relation:
- Journal Volume: 6968; Conference: SERENE 2011: 3rd International Workshop on Software Engineering for Resilient Systems,Geneva, Switzerland,09/29/2011,09/30/2011
- Country of Publication:
- United States
- Language:
- English
Similar Records
Profile-based adaptive anomaly detection for network security.
Neural Network Based Intrusion Detection System for Critical Infrastructures