Forensic Investigation Framework for Complex Cyber Attack on Cyber Physical System by Using Goals/Sub-goals of an Attack and Epidemics of Malware in a System

Mishra, Shivani

doi:10.1007/978-981-13-2685-1_47

Cited by 2 publications

(2 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, ICS forensics requires different approaches than traditional IT systems. Most of the existing work in ICS forensics attempts to adapt traditional IT forensic investigation frameworks to apply them to ICS ( Altschaffel et al, 2019;Elhoseny et al, 2017;Mishra, 2019 ). Other work has proposed techniques to perform live forensics, i.e., investigate potential attacks while the system is running ( Al-Sharif et al, 2018;Taveras, 2013 ).…”

Section: Related Workmentioning

confidence: 99%

Forensic readiness of industrial control systems under stealthy attacks

Azzam

Pasquale²,

Provan³

et al. 2023

Computers & Security

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

Forensic readiness of industrial control systems under stealthy attacks

Azzam

Pasquale²,

Provan³

et al. 2023

Computers & Security

View full text Add to dashboard Cite

“…This makes these attacks difficult to detect, trace, and analyze. Mishra [86] addressed this complexity by proposing a modeling forensic investigation process. An epidemiology model was employed to find the degree of interaction among infectious components of the CPS.…”

Section: Current Cps Forensics Approachesmentioning

confidence: 99%

Cyber–Physical Systems Forensics: Today and Tomorrow

Mohamed

Al-Jaroodi

Jawhar

2020

JSAN

View full text Add to dashboard Cite

Cyber–Physical Systems (CPS) connect the physical world (systems, environments, and humans) with the cyber world (software, data, etc.) to intelligently enhance the operational environment they serve. CPS are distributed software and hardware components embedded in the physical world and possibly attached to humans. They offer smart features, such as enhancing and optimizing the reliability, quality, safety, health, security, efficiency, operational costs, sustainability, and maintainability of physical systems. CPS are also very vulnerable to security attacks and criminal activities. In addition, they are very complex and have a direct impact on their environment. Therefore, it is hard to detect and investigate security attacks, while such attacks may have a catastrophic impact on the physical world. As a result, CPS must incorporate security measures in addition to suitable and effective forensics capabilities. When the security measures fail and an attack occurs, it becomes imperative to perform thorough forensics analysis. Adding effective forensics tools and capabilities will support the investigations of incidents. This paper defines the field of CPS forensics and its dimensions: Technical, Organizational, and Legal. Then, it reviews examples of current research efforts in the field and the types of tools and methods they propose for CPS forensics. In addition, it discusses the issues and challenges in the field that need to be addressed by researchers and developers of CPS. The paper then uses the review outcomes to discuss future research directions to address challenges and create a more effective, efficient, and safe forensics tools and for CPS. This discussion aims to create a starting point for researchers where they can identify the gaps and challenges and create suitable solutions through their research in CPS forensics.

show abstract

Forensic Investigation Framework for Complex Cyber Attack on Cyber Physical System by Using Goals/Sub-goals of an Attack and Epidemics of Malware in a System

Cited by 2 publications

References 17 publications

Forensic readiness of industrial control systems under stealthy attacks

Forensic readiness of industrial control systems under stealthy attacks

Cyber–Physical Systems Forensics: Today and Tomorrow

Contact Info

Product

Resources

About