Idaho National Laboratory Supervisory Control and Data Acquisition Intrusion Detection System (SCADA IDS)

被引：43

作者：

Verba, Jared ^{[1
]}

Milvich, Michael ^{[1
]}

机构：

[1] Idaho Natl Lab, Idaho Falls, ID 83415 USA

来源：

2008 IEEE CONFERENCE ON TECHNOLOGIES FOR HOMELAND SECURITY, VOLS 1 AND 2 | 2008年

关键词：

D O I：

10.1109/THS.2008.4534498

中图分类号：

TP39 [计算机的应用];

学科分类号：

081203 ; 0835 ;

摘要：

Current Intrusion Detection System (IDS) technology is not suited to be widely deployed inside a Supervisory, Control and Data Acquisition (SCADA) environment. Anomaly- and signature-based IDS technologies have developed methods to cover information technology-based networks activity and protocols effectively. However, these IDS technologies do not include the fine protocol granularity required to ensure network security inside an environment with weak protocols lacking authentication and encryption. By implementing a more specific and more intelligent packet inspection mechanism, tailored traffic flow analysis, and unique packet tampering detection, IDS technology developed specifically for SCADA environments can be deployed with confidence in detecting malicious activity.

引用

页码：469 / 473

页数：5