Secure VM for Monitoring Industrial Process Controllers

Conference · Fri Dec 31 23:00:00 EST 2010

OSTI ID:1039960

Dasgupta, Dipankar ^[1]; Ali, Mohammad Hassan ^[2]; Abercrombie, Robert K ^[1]; Schlicher, Bob G ^[1]; Sheldon, Frederick T ^[1]; Carvalho, Marco ^[3]

---

1. ORNL
2. University of Memphis
3. Institute of Human and Machine Cognition

In this paper, we examine the biological immune system as an autonomic system for self-protection, which has evolved over millions of years probably through extensive redesigning, testing, tuning and optimization process. The powerful information processing capabilities of the immune system, such as feature extraction, pattern recognition, learning, memory, and its distributive nature provide rich metaphors for its artificial counterpart. Our study focuses on building an autonomic defense system, using some immunological metaphors for information gathering, analyzing, decision making and launching threat and attack responses. In order to detection Stuxnet like malware, we propose to include a secure VM (or dedicated host) to the SCADA Network to monitor behavior and all software updates. This on-going research effort is not to mimic the nature but to explore and learn valuable lessons useful for self-adaptive cyber defense systems.

• Research Organization: Oak Ridge National Laboratory (ORNL)
• Sponsoring Organization: USDOE
• DOE Contract Number: AC05-00OR22725
• OSTI ID: 1039960
• Country of Publication: United States
• Language: English

Related Subjects

99 GENERAL AND MISCELLANEOUS
Bio-inspired Computing
COMPUTER NETWORKS
Cyber Security
Cyber Space Protection
DATA ACQUISITION
DATA ANALYSIS
DECISION MAKING
DETECTION
Design
INFORMATION
MONITORING
Reliability
SCADA Threat Mitigation
SECURITY
Self-protection
Signaling
Threat Mitigation