Cyber Security Backdrop: A SCADA testbed

Farooqui, Adnan A; Zaidi, Syed Sajjad Haider; Memon, Attaullah Y.; Qazi, Sameer

doi:10.1109/comcomap.2014.7017178

Cited by 17 publications

(14 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [7], it is presented a testbed for Supervisory Control and Data Acquisition (SCADA) using TrueTime -a MAT-LAB/Simulink based tool. The authors demonstrate an attack where a malicious agent transmits false signals to the controller and actuator of an NCS.…”

Section: Related Workmentioning

confidence: 99%

“…In [1], it is demonstrated another stealth attack where the attacker, aware of the system's model, injects an attack signal in the NCS to steal water from the Gignac canal system located in Southern France. [11] Modifications Yes Experiments in the PLC in a real code system Long, et al [12] Inducing jitter None N/A and packet loss Farooqui, et al [7] Data injection None N/A Smith [16,17] Data injection Yes Not described Teixeira [20] Packet loss None N/A Data injection Yes Not described Amin [1] Data injection Yes Not described SD-Controlled [5] Data injection Yes Passive system identification…”

Section: Related Workmentioning

confidence: 99%

“…A(z) , ∀k > ks. (7) wherein ya(k) represents the portion of y(k) caused by the attack signal a(k). The value of q can be assessed by the attacker through an eavesdropping attack in the feedback stream, by just capturing y(k) after the stabilization of the NCS.…”

Section: The Active System Identification Attackmentioning

confidence: 99%

See 2 more Smart Citations

Bio-inspired Active Attack for Identification of Networked Control Systems

de¹,

Carmo²,

Machado³

2017

Proceedings of the 10th EAI International Conference on Bio-Inspired Information and Communications Technologies (Formerly BION

View full text Add to dashboard Cite

The use of communication networks to interconnect controllers and physical plants in industrial and critical infrastructure facilities exposes such control systems to threats typical of the cyber domain. In this sense, studies have been done to explore vulnerabilities and propose security solutions for Networked Control System (NCS). From the point of view of the control theory, the literature indicates that stealthy and accurate cyber-physical attacks must be planned based on an accurate knowledge about the model of the NCS. However, most literature about these attacks does not indicate how such knowledge is obtained by the attacker. So, to fill this hiatus, it is proposed and evaluated in this paper an Active System Identification attack, where the attacker injects data on the NCS to learn about its model. The attack is implemented based on two bio-inspired metaheuristics, namely: Backtracking Search Optimization Algorithm (BSA); and Particle Swarm Optimization (PSO). The results indicate a better performance of the BSA-based attack, especially when the captured signals contain white Gaussian noise. The goal of this paper is to demonstrate the degree of accuracy that this attack may achieve, highlighting the potential impacts and encouraging the research of possible countermeasures. CCS Concepts •Security and privacy → Formal security models; Cryptanalysis and other attacks; •Computing methodologies → Search methodologies; Computational control theory;

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Bio-inspired Active Attack for Identification of Networked Control Systems

de¹,

Carmo²,

Machado³

2017

Proceedings of the 10th EAI International Conference on Bio-Inspired Information and Communications Technologies (Formerly BION

View full text Add to dashboard Cite

show abstract

“…In [4], the authors demonstrate an attack where false signals are transmitted to the controller and the actuator of an NCS. The false signals are randomly generated by the attacker, aiming to cause the instability of the plant (a DC motor).…”

Section: Related Workmentioning

confidence: 99%

“…The integration of controllers and physical processes via communication networks aims to provide these systems with better operational and management capabilities, as well as reduce costs. By virtue of these advantages, the number of NCSs applied to industrial processes and critical infrastructure systems is increasing [1][2][3][4][5][6][7][8][9][10]. A diagram of an NCS is depicted in Networked control system (NCS) [12] plant's behavior are physically difficult to be perceived.…”

Section: Introductionmentioning

confidence: 99%

A controller design for mitigation of passive system identification attacks in networked control systems

Sá

Carmo

Machado

2018

J Internet Serv Appl

View full text Add to dashboard Cite

The literature regarding attacks in Networked Control Systems (NCS) indicates that covert and accurate attacks must be designed based on an accurate knowledge about the model of the attacked system. In this context, the literature on NCS presents the Passive System Identification attack as a metaheuristic-based tool to provide the attacker with the required system models. However, the scientific literature does not report countermeasures to mitigate the identification process performed by such passive metaheuristic-based attack. In this sense, this work proposes the use of a randomly switching controller as a countermeasure for the Passive System Identification attack, in case of failure of other conventional security mechanisms -such as encryption, network segmentation and firewall policies. This novel countermeasure aims to hinder the identification of the controller, so that the model obtained by the attacker is imprecise or ambiguous, in such a way that the attacker hesitates to launch covert or model-dependent attacks against the NCS. The simulation results indicate that this countermeasure is capable to mitigate the mentioned attack at the same time that it performs a satisfactory plant control.

show abstract