State-based Firewall for Industrial protocols with Critical-State Prediction Monitor
Traditional cyber-security countermeasures are inadequate for protecting modern Industrial Critical Infrastructures. In this paper we present an innovative ltering technique for industrial protocols based on the state analysis of the system being monitored. Since we focus our attention on the system behavior rather than on modeling the behavior of the possible attackers, this approach enables the detection of previously unknown attacks. Moreover, we introduce the concept of Critical State Prediction, function that is used for anticipating the evolution of the system towards possible critical states. Finally we provide experimental comparative results that conrm the validity of the proposed approach.
NAI FOVINO Igor;
CARCANO Andrea;
GUGLIELMI Michele;
COLETTA Alessio;
MASERA Marcelo;
TROMBETTA Alberto;
2012-07-04
SPRINGER VERLAG
JRC59645
0302-9743,
https://publications.jrc.ec.europa.eu/repository/handle/JRC59645,
10.1007/978-3-642-21694-7_10,
Additional supporting files
| File name | Description | File type | |
|---|
