An architecture for SCADA network forensics

被引：0

作者：

Kilpatrick, T. ^{[1
]}

Gonzalez, J. ^{[1
]}

Chandia, R. ^{[1
]}

Papa, M. ^{[1
]}

Shenoi, S. ^{[1
]}

机构：

[1] Univ Tulsa, Tulsa, OK 74104 USA

来源：

ADVANCES IN DIGITAL FORENSICS II | 2006年 / 222卷

关键词：

process control systems; SCADA networks; network forensics;

D O I：

暂无

中图分类号：

TP31 [计算机软件];

学科分类号：

081202 ; 0835 ;

摘要：

Supervisory control and data acquisition (SCADA.) systems are widely used in industrial control and automation. Modern SCADA protocols often employ TCP/IP to transport sensor data and control signals. Meanwhile, corporate IT infrastructures are interconnecting with previously isolated SCADA networks. The use of TCP/IP as a carrier protocol and the interconnection of IT and SCADA networks raise serious security issues. This paper describes an architecture for SCADA network forensics. In addition to supporting forensic investigations of SCADA network incidents, the architecture incorporates mechanisms for monitoring process behavior, analyzing trends and optimizing plant performance.

引用

页码：273 / +

页数：3