Anomaly Detection in Cyclic Communication in OT Protocols

Smolarczyk, Miłosz; Plamowski, Sebastian; Pawluk, Jakub; Szczypiorski, Krzysztof

doi:10.3390/en15041517

Cited by 7 publications

(4 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Industrial communication is characterized by high regularity, while cyclicality creates another dimension in order to study deviations. These resources are used by [ 26 ] in order to present a method for detecting anomalies in cyclic communication using the Modbus protocol.…”

Section: Other Related Workmentioning

confidence: 99%

Enhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported

Martins

Oliveira

2022

Sensors

View full text Add to dashboard Cite

The Zero Trust concept is being adopted in information technology (IT) deployments, while human users remain to be the main risk for operational technology (OT) deployments. This article proposes to enhance the new Modbus/TCP Security protocol with authentication and authorization functions that guarantee security against intentional unauthorized access. It aims to comply with the principle of never trusting the person who is accessing the network before carrying out a security check. Two functions are tested and used in order to build an access control method that is based on a username and a password for human users with knowledge of industrial automation control systems (IACS), using simple means, low motivation, and few resources. A man-in-the-middle (MITM) component was added in order to intermediate the client and the server communication and to validate these functions. The proposed scenario was implemented using the Node-RED programming platform. The tests implementing the functions and the access control method through the Node-RED software have proven their potential and their applicability.

show abstract

Section: Other Related Workmentioning

confidence: 99%

Enhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported

Martins

Oliveira

2022

Sensors

View full text Add to dashboard Cite

show abstract

“…Threat detection might rely on signatures or anomalies [20,21]. In this paper, neural networks are used for anomaly detection and they are considered a heuristic approach [22].…”

Section: Cybersecurity and Artificial Intelligencementioning

confidence: 99%

Heuristic Intrusion Detection Based on Traffic Flow Statistical Analysis

Szczepanik

Niemiec

2022

Energies

View full text Add to dashboard Cite

As telecommunications are becoming increasingly important for modern systems, ensuring secure data transmission is getting more and more critical. Specialised numerous devices that form smart grids are a potential attack vector and therefore is a challenge for cybersecurity. It requires the continuous development of methods to counteract this risk. This paper presents a heuristic approach to detecting threats in network traffic using statistical analysis of packet flows. The important advantage of this method is ability of intrusion detection also in encrypted transmissions. Flow information is processing by neural networks to detect malicious traffic. The architectures of subsequent versions of the artificial neural networks were generated based on the results obtained by previous iterations by searching the hyperparameter space, resulting in more refined models. Finally, the networks prepared in this way exhibited high performance while maintaining a small size—thereby making them an effective method of attacks detection in network environment to protect smart grids.

show abstract

“…The integration of intelligent technology with information technology is rapidly advancing, and remote monitoring and control through the internet is possible, but this convenience comes with potential security threats if proper measures are not taken [1] [2]. Smart devices like cameras must wirelessly transmit data to central servers due to limited energy and computing power [3].…”

Section: Introductionmentioning

confidence: 99%

Lightweight Steganography Technique in The Internet of Things: A survey

Qasim,

Mohammed

2023

AJEST

View full text Add to dashboard Cite

In the context of the Internet of Things (IoT), lightweight steganography provides a revolutionary combination of technology and security, where data concealment meets the efficiency requirements of IoT devices. Lightweight steganography, as opposed to conventional steganographic methods, focuses on concealing information inside digital content while using the least amount of computer resources and energy. Secure data transfer is essential in the IoT world because linked devices may communicate with one another without interruption. IoT devices may communicate private data discreetly while conserving system resources, thanks to the elegant approach offered by lightweight steganography. This novel method makes use of complex algorithms that gently change data packets, turning them into bearers of hidden information without raising any red flags. The secrecy of IoT ecosystems is strengthened by lightweight steganography's easy integration of covert communication channels. In addition to improving data security, this technology also optimizes bandwidth usage and increases device battery life. A future when linked devices may transmit information safely, effectively, and surreptitiously is predicted as the IoT environment develops. This would usher in a period of unmatched data security and resource optimization.

show abstract

Anomaly Detection in Cyclic Communication in OT Protocols

Cited by 7 publications

References 14 publications

Enhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported

Enhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported

Heuristic Intrusion Detection Based on Traffic Flow Statistical Analysis

Lightweight Steganography Technique in The Internet of Things: A survey

Contact Info

Product

Resources

About