Preemptive: an integrated approach to intrusion detection and prevention in industrial control systems

Miciolino, Estefanía Etchevés; Noto, Dario Di; Griscioli, Federico; Pizzonia, Maurizio; Kippe, Jörg; Pfrang, Steffen; Clotet, Xavier; León, Gladys; Kassim, Fatai Babatunde; Lund, David J.; Costante, Elisa

doi:10.1504/ijcis.2017.088233

Cited by 4 publications

(2 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We showed our prototypes to security experts that we met within meetings of the Preemptive EU research project [22]. The feedback was very positive for both of them.…”

Section: Prototypical Realisation and Feedbacks From Expertsmentioning

confidence: 99%

USBCaptchaIn: Preventing (Un)Conventional Attacks from Promiscuously Used USB Devices in Industrial Control Systems

Griscioli¹,

Pizzonia²

2018

Preprint

Self Cite

View full text Add to dashboard Cite

Industrial Control Systems (ICS) are sensible targets for high profile attackers and advanced persistent threats, which are known to exploit USB thumb drives as an effective spreading vector. In ICSes, thumb drives are widely used to transfer files among disconnected systems and represent a serious security risks, since, they may be promiscuously used in both critical and regular systems. The threats come both from malware hidden in files stored in the thumb drives and from BadUSB attacks [17]. BadUSB leverages the modification of firmware of USB devices in order to mimic the behaviour of a keyboard and send malicious commands to the host.We present a solution that allows a promiscuous use of USB thumbs drives while protecting critical machines from malware, that spread by regular file infection or by firmware infection. The main component of the architecture we propose is an hardware, called USBCaptchaIn, intended to be in the middle between a critical machine and all USB devices. We do not require users to change the way they use thumb drives. To avoid human-errors, we do not require users to take any decision. The proposed approach is highly compatible with already deployed products of a ICS environment and proactively blocks malware before they reach their targets. We describe our solution, provide a thorough analysis of the security of our approach in the ICS context, and report the informal feedback of some experts regarding our first prototypes.

show abstract

“…We showed our prototypes to security experts that we met within meetings of the Preemptive EU research project [22]. The feedback was very positive for both of them.…”

Section: Prototypical Realisation and Feedbacks From Expertsmentioning

confidence: 99%

USBCaptchaIn: Preventing (Un)Conventional Attacks from Promiscuously Used USB Devices in Industrial Control Systems

Griscioli¹,

Pizzonia²

2018

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…The works [5] and [3] propose to use authenticated data structures to scale with respect to the size of the blockchain state. Other works related to scalability of ADSes are [18], [17], [10], [16], [9].…”

Section: State Of the Artmentioning

confidence: 99%

Scaling blockchains without giving up decentralization and security

Monte

Pennino

Pizzonia

2020

Proceedings of the 3rd Workshop on Cryptocurrencies and Blockchains for Distributed Systems

Self Cite

View full text Add to dashboard Cite

Public blockchains should be able to scale with respect to the number of nodes and to the transactions workload. The blockchain scalability trilemma has been informally conjectured. This is related to scalability, security and decentralization, stating that any improvement in one of these aspects should negatively impact on at least one of the other twos. In fact, despite the large research and experimental effort, all known approaches turn out to be tradeoffs.We theoretically describe a new blockchain architecture that scales to arbitrarily high workload provided that a corresponding proportional increment of nodes is provisioned. We show that, under reasonable assumptions, our approach does not require tradeoffs on security or decentralization. To the best of our knowledge, this is the first result that disprove the trilemma considering the scalability of all architectural elements of a blockchain and not only the consensus protocol. While our result is currently only theoretic, we believe that our approach may stimulate significant practical contributions.

show abstract

A real-time anomaly-based IDS for cyber-attack detection at the industrial process level of Critical Infrastructures

Clotet

Moyano

León

2018

International Journal of Critical Infrastructure Protection

View full text Add to dashboard Cite

Preemptive: an integrated approach to intrusion detection and prevention in industrial control systems

Cited by 4 publications

References 31 publications

USBCaptchaIn: Preventing (Un)Conventional Attacks from Promiscuously Used USB Devices in Industrial Control Systems

USBCaptchaIn: Preventing (Un)Conventional Attacks from Promiscuously Used USB Devices in Industrial Control Systems

Scaling blockchains without giving up decentralization and security

A real-time anomaly-based IDS for cyber-attack detection at the industrial process level of Critical Infrastructures

Contact Info

Product

Resources

About