Intrusion Detection of Industrial Control System based on Modbus TCP Protocol

被引：32
|
作者：
Wang Yusheng [1 ]
Fan Kefeng [2 ]
Lai Yingxu [1 ]
Liu Zenghui [3 ]
Zhou Ruikang [2 ]
Yao Xiangzhen [2 ]
Li Lin [2 ]
机构：
[1] Beijing Univ Technol, Coll Comp Sci, Beijing 100124, Peoples R China
[2] China Elect Standardizat Inst, Beijing 100007, Peoples R China
[3] Beijing Polytech, Automat Engn Sch, Beijing 100176, Peoples R China
来源：
2017 IEEE 13TH INTERNATIONAL SYMPOSIUM ON AUTONOMOUS DECENTRALIZED SYSTEMS (ISADS 2017) | 2017年
基金：
北京市自然科学基金;
关键词：
industrial control systems; protocol parsing; semantic analysis; period; deep inspection;
D O I：
10.1109/ISADS.2017.29
中图分类号：
TP [自动化技术、计算机技术];
学科分类号：
0812 ;
摘要：
Modbus over TCP/IP is one of the most popular industrial network protocol that are widely used in critical infrastructures. However, vulnerability of Modbus TCP protocol has attracted widely concern in the public. The traditional intrusion detection methods can identify some intrusion behaviors, but there are still some problems. In this paper, we present an innovative approach, SD-IDS (Stereo Depth IDS), which is designed for perform real-time deep inspection for Modbus TCP traffic. SD-IDS algorithm is composed of two parts: rule extraction and deep inspection. The rule extraction module not only analyzes the characteristics of industrial traffic, but also explores the semantic relationship among the key field in the Modbus TCP protocol. The deep inspection module is based on rule-based anomaly intrusion detection. Furthermore, we use the online test to evaluate the performance of our SD-IDS system. Our approach get a low rate of false positive and false negative.
引用
收藏
页码：156 / 162
页数：7
相关论文
共 50 条
  • [21] Survey on Methodology of Intrusion Detection in Industrial Control System Based on Artificial Intelligence
    Li, Ligang
    Fu, Zhenyu
    Zou, Gaokai
    Mu, Zongjun
    Zhang, Qiaoxia
    Wang, Guangmin
    Wang, Pan
    2022 INTERNATIONAL CONFERENCE ON COMPUTERS AND ARTIFICIAL INTELLIGENCE TECHNOLOGIES, CAIT, 2022, : 93 - 103
  • [22] Intrusion detection of industrial control system based on stacked auto-encoder
    Zhang, Rui
    Chen, Hongwei
    2019 CHINESE AUTOMATION CONGRESS (CAC2019), 2019, : 5638 - 5643
  • [23] Modbus/TCP based network control system for water process in the firepower plant
    Liu, Qing
    Li, Yingmei
    WCICA 2006: SIXTH WORLD CONGRESS ON INTELLIGENT CONTROL AND AUTOMATION, VOLS 1-12, CONFERENCE PROCEEDINGS, 2006, : 432 - +
  • [24] Modbus/DNP3 State-based Intrusion Detection System
    Fovino, Igor Nai
    Carcano, Andrea
    Murel, Thibault De lacheze
    Trombetta, Alberto
    Masera, Marcelo
    2010 24TH IEEE INTERNATIONAL CONFERENCE ON ADVANCED INFORMATION NETWORKING AND APPLICATIONS (AINA), 2010, : 729 - 736
  • [25] Protocol based foresight anomaly intrusion detection system
    Tsai, MK
    Lin, SC
    Tseng, SS
    37TH ANNUAL 2003 INTERNATIONAL CARNAHAN CONFERENCE ON SECURITY TECHNOLOGY, PROCEEDINGS, 2003, : 493 - 500
  • [26] Deep Packet Inspection in Industrial Automation Control System to Mitigate Attacks Exploiting Modbus/TCP Vulnerabilities
    Nyasore, Osborn N.
    Zavarsky, Pavol
    Swar, Bobby
    Naiyeju, Raphael
    Dabra, Shubham
    2020 IEEE 6TH INT CONFERENCE ON BIG DATA SECURITY ON CLOUD (BIGDATASECURITY) / 6TH IEEE INT CONFERENCE ON HIGH PERFORMANCE AND SMART COMPUTING, (HPSC) / 5TH IEEE INT CONFERENCE ON INTELLIGENT DATA AND SECURITY (IDS), 2020, : 241 - 245
  • [27] Design of Surface Plates Flatness Detection System based on Modbus Protocol
    Liu Xijun
    Hu Bing
    An Jinxin
    Xing Lei
    FUTURE MATERIALS ENGINEERING AND INDUSTRY APPLICATION, 2012, 365 : 67 - 72
  • [28] Application of Modbus/TCP Protocol in Smart Home
    Xiao, Zeyu
    PROCEEDINGS OF THE 2ND INTERNATIONAL CONFERENCE ON MECHATRONICS ENGINEERING AND INFORMATION TECHNOLOGY (ICMEIT 2017), 2017, 70 : 697 - 700
  • [29] Assessing Industrial Control System Attack Datasets for Intrusion Detection
    Wang, Xuelei
    Foo, Ernest
    2018 THIRD INTERNATIONAL CONFERENCE ON SECURITY OF SMART CITIES, INDUSTRIAL CONTROL SYSTEM AND COMMUNICATIONS (SSIC), 2018,
  • [30] Attack signal estimation for intrusion detection in industrial control system
    Miao, Kelei
    Shi, Xiufang
    Zhang, Wen-An
    COMPUTERS & SECURITY, 2020, 96
12345