Abstract:Resilience improvement of complex internets of utility systems is still an open issue for the current research. Proposed solutions fail to implement an integrated approach to detection, mitigation, and reaction which is able to face both well-known and new, previously unknown cyber-attacks (in particular distributed ones, which constitute one of the most serious and still unresolved threat scenarios affecting networked systems). In this work, we present the conceptual architecture of a novel multi-layer distributed Intrusion Detection and Reaction System based on the Autonomic Communication paradigm. The architecture relies on a self-organizing cooperative overlay network of complementary components that are dynamically and autonomously adapted to face distributed cyberattacks against Industrial Control Systems. The proposed architecture aims at being a guideline for experts and practitioners to address the well-known problem of distributed nature of new types of cyber-attacks, by implementing mechanisms to orchestrate available resources for effective detection and remediation dynamically. A distributed flow monitoring system provides input data to cooperative intrusion detection agents, which allow correlating information from heterogeneous feeds to improve the identification of attacks originating from both the inside and the outside of the monitored network and to support customizable remediation mechanisms.

An Adaptive Intrusion Tolerance Model Based on Autonomic Computing

Autonomic Intrusion Tolerance System Model

Survivability Evaluation on Autonomic Intrusion Tolerant System

Proactive Intrusion Detection Model Based on Autonomic Computing

Quantitative Evaluation For Survivability Of Autonomic Intrusion Tolerance System

Conceptual Model and Realization Methods of Autonomic Computing

An Autonomic Intrusion Detection Model with Multi-Attribute Auction Mechanism

Autonomic and Dependable Computing: Moving Towards a Model-Driven Approach

An Intrusion-Tolerant Model Based on Dynamic Threshold Mechanism

Network Security Situation Awareness Model Based on Autonomic Computing

System Dependability Self-Tuning Model Based on Autonomic Computing

A New System of Management Technology for Autonomic Computing

A New Rational Model Of Agent For Autonomic Computing

Autonomic Computing and Reliability Improvement

Intrusion Tolerance for Networked Systems through Two-Level Feedback Control

State-Based Generalized Autonomic Computing Models

AN INTRUSION-TOLERANT BASED SCHEME FOR SURVIVABLE SYSTEM DESIGN

Modeling And Evaluation Of Intrusion Tolerant Systems Based On Dynamic Diversity Backups

Multi-agent system based autonomic computing environment

A self-adaptation-based approach to resilience improvement of complex internets of utility systems

A Service Self-Optimization Algorithm Based on Autonomic Computing