A Novel Framework for Industrial Control System Malicious Code Analysis

Abstract

industrial Control System (ICS) performs the tasks of supervisory control and data acquisition of critical infrastructures. With the widely application of computer and network techniques, ICS suffers serious security threats, and malicious codes are one of the most serious security problems. However, there is absent of analysis methods specific for ICS malicious code behaviors in current times. In this paper, a framework for ICS malicious code analysis is presented. Firstly, the ICS attack graph model is established based upon the hierarchical structure of industrial control system and the suffered security threats, which formalizes the attack process of ICS malicious code. Secondly, the runtime information of ICS malicious code is detected and collected for analyzing and assessing the attack behaviors and the resulted impacts. Finally, the ICS simulation environment for malicious code analysis is constructed based upon the framework and the experimental analysis of ICS malicious code is performed which preliminary validates the effectiveness of the proposed framework.

Review on Information Security of Industrial Control Systems

“…The American Gas Association (AGA12) proposes a fast encryption method for SCADA system, which reduces the execution time of the encryption system [46,47,48]. Fang et al proposed a malicious code analysis framework based on ICS attack graph model [49]. Paper [50] uses Co-evolutionary Genetic Algorithm to balance the security and real-time performance of networked control systems.…”