Enhancing the Resiliency of Cyber-Physical Systems with Software-Defined Networks

Abstract

Numerous research efforts have focused on intrusion detection in industrial control networks, however, few of them discuss what to do after an intrusion has been detected. Because the safety of most of these control systems is time-sensitive, we need new research on automatic incident response. In this paper, we extend our work on leveraging Software-Defined Networking (SDN) to automatically reconfigure an industrial control network to mitigate the impact of attacks, and to deceive adversaries. CCS CONCEPTS • Security and privacy → Intrusion detection systems; Network security; Domain-specific security and privacy architectures; • Networks → Programmable networks; • Applied computing → Industry and manufacturing.

Classifying resilience approaches for protecting smart grids against cyber threats

“…SDN is again another technology that can implement deception techniques, specifically when it is used in conjunction with honeypots. For example, a honeypot network is introduced in [112] which is identical to the field network under investigation. When the IDS of the system identifies an adversary, it informs the SDN controller to properly modify the flow tables in order to relocate the attacker and lead them to the honeypot.…”