Anomaly Detection Based on Temporal Behavior Monitoring in Programmable Logic Controllers

被引:2
|
作者
Han, Seungjae [1 ]
Lee, Keonyong [2 ]
Cho, Seongje [3 ]
Park, Moonju [4 ]
机构
[1] Dankook Univ, Dept Comp Sci & Engn, Yongin 16890, South Korea
[2] Dankook Univ, Dept Appl Comp Engn, Yongin 16890, South Korea
[3] Dankook Univ, Dept Software Sci, Yongin 16890, South Korea
[4] Incheon Natl Univ, Dept Comp Sci & Engn, Incheon 22012, South Korea
关键词
programmable logic controller; anomaly detection; embedded system; industrial control system;
D O I
10.3390/electronics10101218
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
As Programmable Logic Controllers (PLCs) are increasingly connected and integrated into the industrial Internet of things, cybersecurity threats to PLCs are also increasing. Adversaries can perform a denial of service (DoS) attack based on the transmission of a large number of network packets, and a control-logic injection attack through sophisticated packet transmission. We propose an approach to detecting and defending against attacks that exploit security vulnerabilities in a PLC system. In order to protect against indiscriminate packet transmission attacks that exploit uncontrolled resource consumption vulnerabilities, an abnormal temporal behavior detection method is proposed that monitors the CPU usage of tasks. If a temporal anomaly is detected, the proposed approach tries to detect control-flow anomalies by examining the sequences of function calls, then detects stack-based buffer overflow attacks. The proposed method is implemented in a water tank control system for evaluation purposes. The experimental results show that the proposed method can improve the security of the system by detecting anomalies in temporal behavior with little system overhead.
引用
收藏
页数:13
相关论文
共 50 条
  • [1] Temporal Execution Behavior for Host Anomaly Detection in Programmable Logic Controllers
    Formby, David
    Beyah, Raheem
    IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, 2020, 15 : 1455 - 1469
  • [2] Graph Anomaly Detection in Programmable Logic Controllers Based on Service Computing
    Wu, Huifeng
    Hu, Junjie
    Tian, Xi
    Xiao, Zeyun
    Sun, Danfeng
    Simon, Rene
    2024 IEEE INTERNATIONAL CONFERENCE ON WEB SERVICES, ICWS 2024, 2024, : 1188 - 1197
  • [3] A Temporal Logic for Programmable Logic Controllers
    Garanina, N. O.
    Anureev, I. S.
    Zyubin, V. E.
    Staroletov, S. M.
    Liakh, T. V.
    Rozov, A. S.
    Gorlatch, S. P.
    AUTOMATIC CONTROL AND COMPUTER SCIENCES, 2021, 55 (07) : 763 - 775
  • [4] A Temporal Logic for Programmable Logic Controllers
    N. O. Garanina
    I. S. Anureev
    V. E. Zyubin
    S. M. Staroletov
    T. V. Liakh
    A. S. Rozov
    S. P. Gorlatch
    Automatic Control and Computer Sciences, 2021, 55 : 763 - 775
  • [5] Radio-frequency-based anomaly detection for programmable logic controllers in the critical infrastructure
    Stone, Samuel
    Temple, Michael
    INTERNATIONAL JOURNAL OF CRITICAL INFRASTRUCTURE PROTECTION, 2012, 5 (02) : 66 - 73
  • [6] NIPAD: a non-invasive power-based anomaly detection scheme for programmable logic controllers
    Yu-jun Xiao
    Wen-yuan Xu
    Zhen-hua Jia
    Zhuo-ran Ma
    Dong-lian Qi
    Frontiers of Information Technology & Electronic Engineering, 2017, 18 : 519 - 534
  • [7] Programmable Logic Controllers Past Linear Temporal Logic for Monitoring Applications in Industrial Control Systems
    Mao, Xia
    Li, Xin
    Huang, Yanhong
    Shi, Jianqi
    Zhang, Yueling
    IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS, 2022, 18 (07) : 4393 - 4405
  • [8] NIPAD: a non-invasive power-based anomaly detection scheme for programmable logic controllers
    Xiao, Yu-jun
    Xu, Wen-yuan
    Jia, Zhen-hua
    Ma, Zhuo-ran
    Qi, Dong-lian
    FRONTIERS OF INFORMATION TECHNOLOGY & ELECTRONIC ENGINEERING, 2017, 18 (04) : 519 - 534
  • [9] Programmable logic controllers
    Johnson, Dick
    CONTROL ENGINEERING, 2007, 54 (12) : 49 - +
  • [10] Programmable logic controllers
    Erickson, Kelvin T.
    IEEE Potentials, 1996, 15 (01): : 14 - 17