Secure VM for Monitoring Industrial Process Controllers

Conference · Sat Jan 01 00:00:00 EST 2011

OSTI ID:1039960

Dasgupta, Dipankar ^[1]; Ali, Mohammad Hassan ^[2]; Abercrombie, Robert K ^[1]; Schlicher, Bob G ^[1]; Sheldon, Frederick T ^[1]; Carvalho, Marco ^[3]

---

1. ORNL
2. University of Memphis
3. Institute of Human and Machine Cognition

In this paper, we examine the biological immune system as an autonomic system for self-protection, which has evolved over millions of years probably through extensive redesigning, testing, tuning and optimization process. The powerful information processing capabilities of the immune system, such as feature extraction, pattern recognition, learning, memory, and its distributive nature provide rich metaphors for its artificial counterpart. Our study focuses on building an autonomic defense system, using some immunological metaphors for information gathering, analyzing, decision making and launching threat and attack responses. In order to detection Stuxnet like malware, we propose to include a secure VM (or dedicated host) to the SCADA Network to monitor behavior and all software updates. This on-going research effort is not to mimic the nature but to explore and learn valuable lessons useful for self-adaptive cyber defense systems.

• Research Organization: Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: DE-AC05-00OR22725
• OSTI ID: 1039960
• Resource Relation: Conference: 7th Annual Cyber Security and Information Intelligence Research Workshop, Oak Ridge, TN, USA, 20111012, 20111014
• Country of Publication: United States
• Language: English

Related Subjects

99 GENERAL AND MISCELLANEOUS//MATHEMATICS, COMPUTING, AND INFORMATION SCIENCE
COMPUTER NETWORKS
DATA ACQUISITION
DATA ANALYSIS
DECISION MAKING
DETECTION
INFORMATION
MONITORING
SECURITY
Cyber Security
Cyber Space Protection
Design
Reliability
Threat Mitigation
SCADA Threat Mitigation
Bio-inspired Computing
Self-protection
Signaling