Placement of trust anchors in embedded computer systems

Papa, Stephen M.; Casper, William D.; Nair, Suku

doi:10.1109/hst.2011.5955006

Cited by 5 publications

(2 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Once the TFIDS models are defined a subset of signals for the identified models can be analyzed to minimize the number of trust anchors required to support the TFIDS. If trust anchors are located throughout the system then the integrity of the signals can be verifiable at all points and the attacker will need to break the trust anchors to modify system operation [16], and in this case there is no need for a TFIDS. For cases where it is not possible (technically difficult or cost prohibitive) to create a fully trusted system, then a small number of trusted signals with the TFIDS allows for the detection of attacks.…”

Section: B Trust Support For Tfidsmentioning

confidence: 99%

A transfer function based intrusion detection system for SCADA systems

Papa

Casper

Nair

2012

2012 IEEE Conference on Technologies for Homeland Security (HST)

Self Cite

View full text Add to dashboard Cite

Most SCADA and industrial control systems have a limited and deterministic set of behaviors that results with a relatively small amount of variability during normal system operation. Automatic controller commands, operator commands and sensor measurement data within the system may be modified by an attacker to cause system failures. To detect these intrusions a Transfer Function based Intrusion Detection System (TFIDS) is proposed in this paper. Normal operational behaviors can be modeled and integrated into the TFIDS with alarm filtering and reporting rules. Trust anchors within the system are required to collect some of the signals, ensure the signal integrity when delivered to the TFIDS, and to host the TFIDS if physical attacks are a concern. This paper provides an overview of the TFIDS and simulation results for attacks on a waste water treatment system with and without the TFIDS.

show abstract

Section: B Trust Support For Tfidsmentioning

confidence: 99%

A transfer function based intrusion detection system for SCADA systems

Papa

Casper

Nair

2012

2012 IEEE Conference on Technologies for Homeland Security (HST)

Self Cite

View full text Add to dashboard Cite

show abstract

“…Trust anchors in the SCADA security solution perform different roles depending on placement in the architecture [9]. Trust anchors perform interface monitoring functions and provide network protection with the support of encryption, secure communication, and protection of critical input/output (I/O) interfaces.…”

Section: Trust Anchor Functionalitymentioning

confidence: 99%

Security fusion implementation and optimization in SCADA systems

Casper

Papa

Nair

2012

2012 IEEE Conference on Technologies for Homeland Security (HST)

Self Cite

View full text Add to dashboard Cite

SCADA systems are the control backbone of the utility industry where control is critical to the treatment, generation, and distribution of electrical, water, sewage, oil, and gas utilities. These SCADA systems utilize well-known behavior with limited variability. Trust of these control systems is vital to proper operation since improper operation could lead to catastrophic environmental disasters. Trust anchors can be used to provide this desired trust for the SCADA systems and these trust anchors can provide integrity for the required signals and assist in ensuring high availability of the SCADA system. However the implementation of a large number of trust anchors may not be possible due to the size of the deployed system and cost of a complete system replacement. This paper defines how a trust anchor implementation could be optimized and can utilize a security fusion methodology to provide adequate security protection and trust in the system for a reasonable investment.

show abstract