A three-stage analysis of IDS for critical infrastructures

Cazorla, Lorena; Alcaraz, Cristina; López, Javier

doi:10.1016/j.cose.2015.07.005

Cited by 11 publications

(3 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• Remote-to-user attacks (R2L) Twoimportant metrics were used to evaluate the performance of our MAS-DIDS proposal: detection rate (DR) and false positive rate (FPR). DR refers to the number of true attacks detected within these detections [28], defined by: 𝐷𝑅 = 𝑇𝑃 𝑇𝑃 + 𝐹𝑁 (2) FPR refers to the number of instances falsely detected as attacks within all these detections [29], defined by: 𝐹𝑃𝑅 = 𝐹𝑃 𝑇𝑁+𝐹𝑃 (3) where FP represents false positives, TP true positives and FN false negative. We can say that an IDS model is effective and realistic if it achieves a high DR and a low FPR.…”

Section: Resultsmentioning

confidence: 99%

A New Distributed Intrusion Detection System Based on Multi-Agent System for Cloud Environment

ACHBAROU

2022

Int. j. commun. netw. inf. secur.

View full text Add to dashboard Cite

Cloud computing, like any distributed computing system, is continually exposed to many threats and attacks of various origins. Thus, cloud security is now a very important concern for both providers and users. Intrusion detection systems (IDSs) are used to detect attacks in this environment. The goal of security administrators (for both customers and providers) is to prevent and detect attacks while avoiding disruption of the smooth operation of the cloud. Making IDSs efficient is not an easy task in a distributed environment such as the cloud. This problem remains open, and to our knowledge, there are no satisfactory solutions for the automated evaluation and analysis of cloud security. The features of the multi-agent system paradigm, such as adaptability, collaboration, and distribution, make it possible to handle this evolution of cloud computing in an efficient and controlled manner. As a result, multi-agent systems are well suited to the effective management of cloud security. In this paper, we propose an efficient, reliable and secure distributed IDS (DIDS) based on a multi-agent approach to identify and prevent new and complex malicious attacks in this environment. Moreover, some experiments were conducted to evaluate the performance of our model.

show abstract

Section: Resultsmentioning

confidence: 99%

A New Distributed Intrusion Detection System Based on Multi-Agent System for Cloud Environment

ACHBAROU

2022

Int. j. commun. netw. inf. secur.

View full text Add to dashboard Cite

show abstract

“…Thus, an IDSS can become vulnerable to cyberattacks. Consequently, the scientific community, companies, practitioners, and governments worldwide are searching for solutions to mitigate risks [29]. Hayes and Cappa [30] introduced open source intelligence (OSINT) to provide tactical and strategic recommendations for organizations to prevent cyberattacks by identifying vulnerabilities, mitigating risks, and formulating robust security policies.…”

Section: Intelligent Decision Support Systemsmentioning

confidence: 99%

Conceptual Framework of an Intelligent Decision Support System for Smart City Disaster Management

et al. 2020

View full text Add to dashboard Cite

In order to protect human lives and infrastructure, as well as to minimize the risk of damage, it is important to predict and respond to natural disasters in advance. However, currently, the standardized disaster response system in South Korea still needs further advancement, and the response phase systems need to be improved to ensure that they are properly equipped to cope with natural disasters. Existing studies on intelligent disaster management systems (IDSSs) in South Korea have focused only on storms, floods, and earthquakes, and they have not used past data. This research proposes a new conceptual framework of an IDSS for disaster management, with particular attention paid to wildfires and cold/heat waves. The IDSS uses big data collected from open application programming interface (API) and artificial intelligence (AI) algorithms to help decision-makers make faster and more accurate decisions. In addition, a simple example of the use of a convolutional neural network (CNN) to detect fire in surveillance video has been developed, which can be used for automatic fire detection and provide an appropriate response. The system will also consider connecting to open source intelligence (OSINT) to identify vulnerabilities, mitigate risks, and develop more robust security policies than those currently in place to prevent cyber-attacks.

show abstract

“…A wide range of IDSes have been proposed for cyber-physical environments [24]. However, the greater majority of them are designed for specific classes of attacks without exploring possible intelligent capacities to detect multiple attack patterns of covert channel with variable capacities to modify their attack vectors in real time [24]. In the case of data exfiltration, attackers may, for example, customize their attack vectors to optimize modus operandi and simplify their activity traces.…”

Section: Practical Validation Based On It-ot Networkmentioning

confidence: 99%

Covert Channels-Based Stealth Attacks in Industry 4.0

Alcaraz

Bernieri

Pascucci

et al. 2019

IEEE Systems Journal

Self Cite

View full text Add to dashboard Cite

Industry 4.0 advent opens several cyber-threats scenarios originally designed for classic information technology, drawing the attention to serious risks for the modern industrial control networks. To cope with this problem, in this paper we address the security issues related to covert channels applied to industrial networks, identifying the new vulnerability points when information technologies converge with operational technologies such as edge computing infrastructures. Specifically, we define two signaling strategies where we exploit the Modbus/TCP protocol as target to set up a covert channel. Once the threat channel is established, passive and active offensive methodologies are further exploited by implementing and testing them on a real Industrial Internet of Things testbed. The experimental results highlight the potential damage of such specific threats and the easy extrapolation of the attacks to other types of channels in order to show the new risks for the Industry 4.0. Related to this, we discuss some countermeasures offering an overview of possible mitigation and defensive measures.

show abstract

A three-stage analysis of IDS for critical infrastructures

Cited by 11 publications

References 20 publications

A New Distributed Intrusion Detection System Based on Multi-Agent System for Cloud Environment

A New Distributed Intrusion Detection System Based on Multi-Agent System for Cloud Environment

Conceptual Framework of an Intelligent Decision Support System for Smart City Disaster Management

Covert Channels-Based Stealth Attacks in Industry 4.0

Contact Info

Product

Resources

About