Anomaly Based IDS Via Customised CUSUM Algorithm for Industrial Communication Systems

Ashraf Ali; Andrew Ware

doi:10.1109/MENACOMM50742.2021.9678305

Anomaly Based IDS Via Customised CUSUM Algorithm for Industrial Communication Systems

Ashraf Ali, Andrew Ware

Grŵp Ymchwil ac Arloesi Cyfrifiadureg, Seiberddiogelwch, Mathemateg a Gwybodeg

Allbwn ymchwil: Pennod mewn Llyfr/Adroddiad/Trafodion Cynhadledd › Cyfraniad i gynhadledd › adolygiad gan gymheiriaid

Crynodeb

Industrial communication and applications have become more connected to the internet due to the enhancement of new 5G based technologies such as the Internet of Things (IoT), cloud computing, Big Data, remote monitoring, and industrial automation techniques. Such improvement has made factory plants more exposed to conventional and new cybersecurity threats. Unfortunately, the advancement in the production cycle elements has not been accompanied by similar progress in developing customised security solutions dedicated to industrial communication systems deployed inside the factory plant. This paper presents a new framework and mechanism that utilise existing components to provide feedback information that reflects the factory components' operation mode and load state. This enables anomaly-based behaviour of the system to be detected. A customised Cumulative Sum (CUSUM) with adaptive thresholds is proposed as part of the detection mechanism deployed by the IDS.

Iaith wreiddiol	Saesneg
Teitl	2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM)
Cyhoeddwr	Institute of Electrical and Electronics Engineers
Tudalennau	31-36
ISBN (Electronig)	978-1-6654-3443-0 , 978-1-6654-3444-7
Dynodwyr Gwrthrych Digidol (DOIs)	https://doi.org/10.1109/MENACOMM50742.2021.9678305
Statws	Cyhoeddwyd - 3 Rhag 2021
Digwyddiad	2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM) - Agadir, Morocco Hyd: 3 Rhag 2021 → 5 Rhag 2021

Cynhadledd

Cynhadledd	2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM)
Cyfnod	3/12/21 → 5/12/21

Mynediad at Ddogfen

10.1109/MENACOMM50742.2021.9678305

Dyfynnu hyn

@inproceedings{f01992e86e444cb2bc241d63d94d28fb,

title = "Anomaly Based IDS Via Customised CUSUM Algorithm for Industrial Communication Systems",

abstract = "Industrial communication and applications have become more connected to the internet due to the enhancement of new 5G based technologies such as the Internet of Things (IoT), cloud computing, Big Data, remote monitoring, and industrial automation techniques. Such improvement has made factory plants more exposed to conventional and new cybersecurity threats. Unfortunately, the advancement in the production cycle elements has not been accompanied by similar progress in developing customised security solutions dedicated to industrial communication systems deployed inside the factory plant. This paper presents a new framework and mechanism that utilise existing components to provide feedback information that reflects the factory components' operation mode and load state. This enables anomaly-based behaviour of the system to be detected. A customised Cumulative Sum (CUSUM) with adaptive thresholds is proposed as part of the detection mechanism deployed by the IDS.",

keywords = "ICS, IDS, PLC, Security, industrial, SCADA, CUSUM",

author = "Ashraf Ali and Andrew Ware",

year = "2021",

month = dec,

day = "3",

doi = "10.1109/MENACOMM50742.2021.9678305",

language = "English",

pages = "31--36",

booktitle = "2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM)",

publisher = "Institute of Electrical and Electronics Engineers",

note = "2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM) ; Conference date: 03-12-2021 Through 05-12-2021",

}

Ali, A & Ware, A 2021, Anomaly Based IDS Via Customised CUSUM Algorithm for Industrial Communication Systems. yn 2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM). Institute of Electrical and Electronics Engineers, tt. 31-36, 2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM), 3/12/21. https://doi.org/10.1109/MENACOMM50742.2021.9678305

Anomaly Based IDS Via Customised CUSUM Algorithm for Industrial Communication Systems. / Ali, Ashraf; Ware, Andrew.
2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM). Institute of Electrical and Electronics Engineers, 2021. t. 31-36.

Allbwn ymchwil: Pennod mewn Llyfr/Adroddiad/Trafodion Cynhadledd › Cyfraniad i gynhadledd › adolygiad gan gymheiriaid

TY - GEN

T1 - Anomaly Based IDS Via Customised CUSUM Algorithm for Industrial Communication Systems

AU - Ali, Ashraf

AU - Ware, Andrew

PY - 2021/12/3

Y1 - 2021/12/3

N2 - Industrial communication and applications have become more connected to the internet due to the enhancement of new 5G based technologies such as the Internet of Things (IoT), cloud computing, Big Data, remote monitoring, and industrial automation techniques. Such improvement has made factory plants more exposed to conventional and new cybersecurity threats. Unfortunately, the advancement in the production cycle elements has not been accompanied by similar progress in developing customised security solutions dedicated to industrial communication systems deployed inside the factory plant. This paper presents a new framework and mechanism that utilise existing components to provide feedback information that reflects the factory components' operation mode and load state. This enables anomaly-based behaviour of the system to be detected. A customised Cumulative Sum (CUSUM) with adaptive thresholds is proposed as part of the detection mechanism deployed by the IDS.

AB - Industrial communication and applications have become more connected to the internet due to the enhancement of new 5G based technologies such as the Internet of Things (IoT), cloud computing, Big Data, remote monitoring, and industrial automation techniques. Such improvement has made factory plants more exposed to conventional and new cybersecurity threats. Unfortunately, the advancement in the production cycle elements has not been accompanied by similar progress in developing customised security solutions dedicated to industrial communication systems deployed inside the factory plant. This paper presents a new framework and mechanism that utilise existing components to provide feedback information that reflects the factory components' operation mode and load state. This enables anomaly-based behaviour of the system to be detected. A customised Cumulative Sum (CUSUM) with adaptive thresholds is proposed as part of the detection mechanism deployed by the IDS.

KW - ICS

KW - IDS

KW - PLC

KW - Security

KW - industrial

KW - SCADA

KW - CUSUM

U2 - 10.1109/MENACOMM50742.2021.9678305

DO - 10.1109/MENACOMM50742.2021.9678305

M3 - Conference contribution

SP - 31

EP - 36

BT - 2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM)

PB - Institute of Electrical and Electronics Engineers

T2 - 2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM)

Y2 - 3 December 2021 through 5 December 2021

ER -

Anomaly Based IDS Via Customised CUSUM Algorithm for Industrial Communication Systems

Crynodeb

Cynhadledd

Mynediad at Ddogfen

Ôl bys

Dyfynnu hyn