HELOT–Hunting Evil Life in Operational Technology

Akailvi, Syed; Gautam, Uddhav; Bhandari, Praveshika; Rashid, Hadi; Huff, Philip D.; Springer, Jan P.

doi:10.1109/tsg.2022.3222261

HELOT–Hunting Evil Life in Operational Technology

Journal Article · 01 July 2023 · IEEE Transactions on Smart Grid

DOI:https://doi.org/10.1109/tsg.2022.3222261· OSTI ID:2418268

Akailvi, Syed ^[1]; Gautam, Uddhav ^[2]; Bhandari, Praveshika ^[2]; ^[2]; ^[2]; ^[2]

Department of Computer Science and the Emerging Analytics Center, UA Little Rock, Little Rock, AR, USA; OSTI
Department of Computer Science and the Emerging Analytics Center, UA Little Rock, Little Rock, AR, USA

Not provided.

Research Organization:: Univ. of Arkansas, Fayetteville, AR (United States)

Sponsoring Organization:: USDOE Office of Electricity Delivery and Energy Reliability (OE)

DOE Contract Number:: OE0000779

OSTI ID:: 2418268

Journal Information:: IEEE Transactions on Smart Grid, Journal Name: IEEE Transactions on Smart Grid Journal Issue: 4 Vol. 14; ISSN 1949-3053

Publisher:: IEEE

Country of Publication:: United States

Language:: English

References (28)

Control flow-based opcode behavior analysis for Malware detection Ding, Yuxin; Dai, Wei; Yan, Shengli Computers & Security, Vol. 44 https://doi.org/10.1016/j.cose.2014.04.003	journal	July 2014
A deep Recurrent Neural Network based approach for Internet of Things malware threat hunting HaddadPajouh, Hamed; Dehghantanha, Ali; Khayami, Raouf Future Generation Computer Systems, Vol. 85 https://doi.org/10.1016/j.future.2018.03.007	journal	August 2018
A Taxonomy of Cyber Attacks on SCADA Systems Zhu, Bonnie; Joseph, Anthony; Sastry, Shankar 4th IEEE Int'l Conference on Cyber, Physical and Social Computing (CPSCom), 2011 International Conference on Internet of Things and 4th International Conference on Cyber, Physical and Social Computing https://doi.org/10.1109/iThings/CPSCom.2011.34	conference	October 2011
DDOA: A Dirichlet-Based Detection Scheme for Opportunistic Attacks in Smart Grid Cyber-Physical System Li, Beibei; Lu, Rongxing; Wang, Wei IEEE Transactions on Information Forensics and Security, Vol. 11, Issue 11 https://doi.org/10.1109/TIFS.2016.2576898	journal	November 2016
SVM Training Phase Reduction Using Dataset Feature Filtering for Malware Detection O'Kane, Philip; Sezer, Sakir; McLaughlin, Kieran IEEE Transactions on Information Forensics and Security, Vol. 8, Issue 3 https://doi.org/10.1109/TIFS.2013.2242890	journal	March 2013
Idea: Opcode-Sequence-Based Malware Detection Santos, Igor; Brezo, Felix; Nieves, Javier Lecture Notes in Computer Science https://doi.org/10.1007/978-3-642-11747-3_3	book	January 2010
Multiattribute SCADA-Specific Intrusion Detection System for Power Networks Yang, Y.; McLaughlin, K.; Sezer, S. IEEE Transactions on Power Delivery, Vol. 29, Issue 3, p. 1092-1102 https://doi.org/10.1109/TPWRD.2014.2300099	journal	June 2014
A Log Correlation Model to Support the Evidence Search Process in a Forensic Investigation Herrerias, Jorge; Gomez, Roberto Second International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'07) https://doi.org/10.1109/SADFE.2007.1	conference	April 2007
Opcode graph similarity and metamorphic detection Runwal, Neha; Low, Richard M.; Stamp, Mark Journal in Computer Virology, Vol. 8, Issue 1-2 https://doi.org/10.1007/s11416-012-0160-5	journal	April 2012
An unsupervised anomaly-based detection approach for integrity attacks on SCADA systems Almalawi, Abdulmohsen; Yu, Xinghuo; Tari, Zahir Computers & Security, Vol. 46 https://doi.org/10.1016/j.cose.2014.07.005	journal	October 2014
SCADA Systems: Challenges for Forensic Investigators Ahmed, Irfan; Obermeier, Sebastian; Naedele, Martin Computer, Vol. 45, Issue 12 https://doi.org/10.1109/MC.2012.325	journal	December 2012
A decision support model for situational awareness in National Cyber Operations Centers Graf, Roman; Skopik, Florian; Whitebloom, Kenny 2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) https://doi.org/10.1109/CyberSA.2016.7503281	conference	June 2016
Integrated OCSVM mechanism for intrusion detection in SCADA systems Maglaras, Leandros A.; Jiang, Jianmin; Cruz, Tiago Electronics Letters, Vol. 50, Issue 25 https://doi.org/10.1049/el.2014.2897	journal	December 2014
Industrial Control System Network Intrusion Detection by Telemetry Analysis Ponomarev, Stanislav; Atkison, Travis IEEE Transactions on Dependable and Secure Computing, Vol. 13, Issue 2 https://doi.org/10.1109/TDSC.2015.2443793	journal	March 2016
Distributed forensics and incident response in the enterprise Cohen, M. I.; Bilby, D.; Caronni, G. Digital Investigation, Vol. 8 https://doi.org/10.1016/j.diin.2011.05.012	journal	August 2011
Accurate modeling of Modbus/TCP for intrusion detection in SCADA systems Goldenberg, Niv; Wool, Avishai International Journal of Critical Infrastructure Protection, Vol. 6, Issue 2 https://doi.org/10.1016/j.ijcip.2013.05.001	journal	June 2013
SCADA Intrusion Detection System based on temporal behavior of frequent patterns Sayegh, Naoum; Elhajj, Imad H.; Kayssi, Ayman MELECON 2014 - 2014 17th IEEE Mediterranean Electrotechnical Conference https://doi.org/10.1109/MELCON.2014.6820573	conference	April 2014
Understanding Machine Learning Shalev-Shwartz, Shai; Ben-David, Shai https://doi.org/10.1017/CBO9781107298019	book	July 2014
A Practical Method for the Direct Analysis of Transient Stability Athay, T.; Podmore, R.; Virmani, S. IEEE Transactions on Power Apparatus and Systems, Vol. PAS-98, Issue 2 https://doi.org/10.1109/TPAS.1979.319407	journal	March 1979
Learning From Experts’ Experience: Toward Automated Cyber Security Data Triage Zhong, Chen; Yen, John; Liu, Peng IEEE Systems Journal, Vol. 13, Issue 1 https://doi.org/10.1109/JSYST.2018.2828832	journal	March 2019
XGBoost: A Scalable Tree Boosting System Chen, Tianqi; Guestrin, Carlos Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining - KDD '16 https://doi.org/10.1145/2939672.2939785	conference	January 2016
Next-generation digital forensics Richard, Golden G.; Roussev, Vassil Communications of the ACM, Vol. 49, Issue 2 https://doi.org/10.1145/1113034.1113074	journal	February 2006
Forenscope Chan, Ellick; Venkataraman, Shivaram; David, Francis Proceedings of the 26th Annual Computer Security Applications Conference https://doi.org/10.1145/1920261.1920307	conference	December 2010
SCADA security device Rodrigues, Aniket; Best, Tish; Pendse, Ravi Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research https://doi.org/10.1145/2179298.2179325	conference	October 2011
Attacks against process control systems: risk assessment, detection, and response Cárdenas, Alvaro A.; Amin, Saurabh; Lin, Zong-Syun Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security - ASIACCS '11 https://doi.org/10.1145/1966913.1966959	conference	January 2011
Deep learning for prioritizing and responding to intrusion detection alerts McElwee, Steven; Heaton, Jeffrey; Fraley, James MILCOM 2017 - 2017 IEEE Military Communications Conference (MILCOM) https://doi.org/10.1109/MILCOM.2017.8170757	conference	October 2017
Opcode sequences as representation of executables for data-mining-based unknown malware detection Santos, Igor; Brezo, Felix; Ugarte-Pedrero, Xabier Information Sciences, Vol. 231 https://doi.org/10.1016/j.ins.2011.08.020	journal	May 2013
Intrusion Detection in SCADA Networks Barbosa, Rafael Ramos Regis; Pras, Aiko Mechanisms for Autonomous Management of Networks and Services https://doi.org/10.1007/978-3-642-13986-4_23	book	January 2010

Similar Records

HELOT–Hunting Evil Life in Operational Technology

Journal Article · 2023 · IEEE Transactions on Smart Grid · OSTI ID:1898447

Thresholds and criteria for evaluating and communicating impact significance in environmental statements: 'See no evil, hear no evil, speak no evil'?

Journal Article · 2008 · Environmental Impact Assessment Review · OSTI ID:21077725

Clear-cutting: the forest's prime evil

Journal Article · 1980 · Horticulture; () · OSTI ID:6064708

Related Subjects

Engineering

HELOT–Hunting Evil Life in Operational Technology

Citation Formats

References (28)

Similar Records

Related Subjects