Abstract:This paper discusses two aspects of major risks related to the cyber security of an industrial control system (ICS), including the exploitation of the vulnerabilities of legitimate communication parties and the features abused by unauthorized parties. We propose a novel framework for exposing the above two types of risks. A state fusion finite state machine (SF-FSM) model is defined to describe multiple request-response packet pair sequence signatures of various applications using the same protocol. An inverted index of keywords in an industrial protocol is also proposed to accomplish fast state sequence matching. Then we put forward the concept of scenario reconstruction, using state sequence matching based on SF-FSM, to present the known vulnerabilities corresponding to applications of a specific type and version by identifying the packet interaction characteristics from the data flow in the supervisory control layer network. We also implement an anomaly detection approach to identifying illegal access using state sequence matching based on SF-FSM. An anomaly is asserted if none of the state sequence signatures in the SF-FSM is matched with a packet flow. Ultimately, an example based on industrial protocols is demonstrated by a prototype system to validate the methods of scenario reconstruction and anomaly detection.

An Improved Event-driven System Infrastructure

Research on Information Security Model and Security System Design

Identification of ICS Security Risks Toward the Analysis of Packet Interaction Characteristics Using State Sequence Matching Based on SF-FSM

Vulnerability Analysis of CSP Based on Stochastic Game Theory

Event-Triggered Security Output Feedback Control for Networked Interconnected Systems Subject to Cyber-Attacks

High Dependable Safety Critical Systems Based on Multilevel Criticality

The Design of a Security Mechanism for Distributed Firewall Systems

Research on High Dependability Integration Technology of Safety Critical Real Time Systems

Research on New Security and Safety Assurance Structure of Distributed System

Control System Security in Nuclear Power Plant

Research for Network Security System Design

Event-based Trust Framework Model in Wireless Sensor Networks

Windows Security:The gradual improvement of SEH mechanism

Modelization and analysis of dynamic heterogeneous redundant system

Computer vulnerability evaluation using fault tree analysis

Vulnerability Analysis Framework for Binaries Based on Model Checking

Critical Infrastructure and Its Safety Management

Design and Improvement of One Database System Security

Integrated vulnerability management system for enterprise networks

ANALYZING THE EFFECTIVENESS OF SOFTWARE DIVERSITY FOR SYSTEM SECURITY

An Event-Based Formal Framework for Dynamic Software Update