Towards a CDS-based Intrusion Detection Deployment Scheme for Securing Industrial Wireless Sensor Networks

Abstract

Abstract-The use of wireless communication is a major trend in the so called Supervisory Control and Data Acquisition systems (SCADA). Consequently, Wireless Industrial Sensor Networks (WISN) were developed to meet real time and security requirements needed by SCADA systems. In term of security, WISN suffer from the same threats that those targeting classical WSN. Indeed, attackers mainly use wireless communication as a medium to launch these attacks. But as these networks are used to manage critical systems, consequences of such attacks can be more harmful. Therefore, additionally to the use of cryptographic and authentication mechanisms, Intrusion Detection Systems (IDS) are also used as a second line of defense. In this paper we propose an efficient IDS deployment scheme specially tailored to fit WISN characteristics. It builds a virtual wireless backbone that adds security purposes to the WISN. We also show that the proposed deployment scheme provides a good traffic monitoring capability with an acceptable number of monitoring nodes. It particularly allows detecting that a packet has been forged, deleted, modified or delayed during its transmission.

Toward Security Enhanced Provisioning in Industrial IoT Systems

“…Olawumi et al showed three types of effective attacks, using vulnerabilities of the Zigbee standard, and proposed countermeasures against them. Alcaraz and Lopez [15] and Bayou et al [16] applied threat models of other networks to the IWSN. Alcaraz and Lopez analyzed the application of the supervisory control and data acquisition (SCADA) threat model and the WSN threat model in Zigbee, WirelessHART, and ISA 100.11a network environments and proposed countermeasures.…”

“…In order to apply the IWSN standard to industrial control systems, security for the IWSN is essential. Therefore, many studies have been carried out to identify vulnerabilities through security analysis of the IWSN standard and to find countermeasures [11,12,13,14,15,16,17]. While it is true that the security of the IWSN standard has been strengthened through these studies, there is still a lack of study on the provisioning process, which is where all security begins.…”

wIDS: A Multilayer IDS for Wireless-Based SCADA Systems

“…The deployment of IDS-agents is out of the scope of this paper. However, in our study, we use the scheme proposed in [14]. This scheme uses the graph theory concept of Connected Dominated Set to ensure the gathering of the whole exchanged traffic.…”

“…∧is_packetT ype(packet , Ack) ∧ is_dstAddr(packet , s) ∧is_assignedF q(s, packet) ∧ is_slotStartT ime(s, packet) (14) We should note that the Network Manager is responsible of building, managing and updating slots and frequencies planning.…”