Using Model-based Intrusion Detection for SCADA Networks
By Steven Cheung, Bruno Dutertre, Martin W. Fong, U. Lindqvist, Keith Skinner, Alfonso Valdes. 2006
378 citations recorded by the source corpus.
View Paper: https://www.semanticscholar.org/paper/4a5706925d36445eddfe0decbf217bb9497df0c0
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
- Bruno Sinopoli
- Saurabh Amin
- Alvaro A. Cárdenas
- W. Knowles
- D. Prince
- S. Sastry
- D. Hutchison
- J. Disso
Citations in the corpus
- A survey SCADA of and critical infrastructure incidents (2012, background): “There have also been advances in using standard networking protocols for communications [1].”
- A survey of intrusion detection techniques for cyber-physical systems (2014, unknown): “Cheung Technique SCADA behavior network DoS and probing Modbus function code unreleased, PPM [Cheung et al. 2007] -specification Modbus and length operational AS”
- Accurate modeling of Modbus/TCP for intrusion detection in SCADA systems (2013, methodology): “For each candidate length, the DFA performance is evaluated based on the validation window.”
- Research Challenges for the Security of Control Systems (2008, unknown): “Therefore, implementing network intrusion detection systems may be easier than in traditional enterprise systems [4].”
- A survey of cyber security management in industrial control systems (2015, methodology): “[36] developed a Snort implementation for Modbus TCP networks as part of a model-based approach to intrusion detection that exploits the typically static topologies and network traffic of industrial control systems.”
- Challenges for Securing Cyber Physical Systems (2009, background): “Therefore, implementing network intrusion detection systems may be easier than in traditional enterprise systems [6].”
- Attacks against process control systems: risk assessment, detection, and response (2011, background): “Therefore, implementing network intrusion detection systems, anomaly detection, and white listing may be easier than in traditional enterprise systems [36].”
- Review of Security Issues in Industrial Networks (2013, unknown): “As a side comment, it is worth noting that a “proof of concept” approach similar to that in [98] has subsequently appeared in [99].”