Anomaly Detection Based on Temporal Behavior Monitoring in Programmable Logic Controllers

被引:2
|
作者
Han, Seungjae [1 ]
Lee, Keonyong [2 ]
Cho, Seongje [3 ]
Park, Moonju [4 ]
机构
[1] Dankook Univ, Dept Comp Sci & Engn, Yongin 16890, South Korea
[2] Dankook Univ, Dept Appl Comp Engn, Yongin 16890, South Korea
[3] Dankook Univ, Dept Software Sci, Yongin 16890, South Korea
[4] Incheon Natl Univ, Dept Comp Sci & Engn, Incheon 22012, South Korea
关键词
programmable logic controller; anomaly detection; embedded system; industrial control system;
D O I
10.3390/electronics10101218
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
As Programmable Logic Controllers (PLCs) are increasingly connected and integrated into the industrial Internet of things, cybersecurity threats to PLCs are also increasing. Adversaries can perform a denial of service (DoS) attack based on the transmission of a large number of network packets, and a control-logic injection attack through sophisticated packet transmission. We propose an approach to detecting and defending against attacks that exploit security vulnerabilities in a PLC system. In order to protect against indiscriminate packet transmission attacks that exploit uncontrolled resource consumption vulnerabilities, an abnormal temporal behavior detection method is proposed that monitors the CPU usage of tasks. If a temporal anomaly is detected, the proposed approach tries to detect control-flow anomalies by examining the sequences of function calls, then detects stack-based buffer overflow attacks. The proposed method is implemented in a water tank control system for evaluation purposes. The experimental results show that the proposed method can improve the security of the system by detecting anomalies in temporal behavior with little system overhead.
引用
收藏
页数:13
相关论文
共 50 条
  • [41] PROGRAMMABLE LOGIC CONTROLLERS - USER EXPERIENCE
    LAPIDUS, G
    CONTROL ENGINEERING, 1972, 19 (04) : 35 - &
  • [42] Teaching programmable logic controllers using multimedia-based courseware
    Blakley, JJ
    Irvine, DA
    INTERNATIONAL JOURNAL OF ELECTRICAL ENGINEERING EDUCATION, 2000, 37 (04) : 305 - 315
  • [43] Teaching programmable logic controllers using multimedia-based courseware
    Blakley, J.J.
    Irvine, D.A.
    International Journal of Electrical Engineering and Education, 2000, 37 (04): : 305 - 315
  • [44] Attribute Based Access Control Model for Protecting Programmable Logic Controllers
    Gowdanakatte, Shwetha
    Ray, Indrakshi
    Houmb, Siv Hilde
    SAT-CPS'22: PROCEEDINGS OF THE 2022 ACM WORKSHOP ON SECURE AND TRUSTWORTHY CYBER-PHYSICAL SYSTEMS, 2022, : 47 - 56
  • [45] An empirical study of control logic specifications for programmable logic controllers
    Oscar Ljungkrantz
    Knut Åkesson
    Martin Fabian
    Amir Hossein Ebrahimi
    Empirical Software Engineering, 2014, 19 : 655 - 677
  • [46] Programmable Logic Controllers in the Context of Industry 4.0
    Sehr, Martin A.
    Lohstroh, Marten
    Weber, Matthew
    Ugalde, Ines
    Witte, Martin
    Neidig, Joerg
    Hoeme, Stephan
    Niknami, Mehrdad
    Lee, Edward A.
    IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS, 2021, 17 (05) : 3523 - 3533
  • [47] DATABASE-SYSTEMS FOR PROGRAMMABLE LOGIC CONTROLLERS
    OZSOYOGLU, G
    HOU, WC
    OLA, A
    LECTURE NOTES IN COMPUTER SCIENCE, 1990, 420 : 183 - 199
  • [48] An empirical study of control logic specifications for programmable logic controllers
    Ljungkrantz, Oscar
    Akesson, Knut
    Fabian, Martin
    Ebrahimi, Amir Hossein
    EMPIRICAL SOFTWARE ENGINEERING, 2014, 19 (03) : 655 - 677
  • [49] Graphical development of software for programmable logic controllers
    Folch, Jose Roger
    Perez, Juan
    Pineda, Manuel
    Puche, Ruben
    2006 12TH INTERNATIONAL POWER ELECTRONICS AND MOTION CONTROL CONFERENCE, VOLS 1-4, 2006, : 1960 - +
  • [50] An evaluation of modification attacks on programmable logic controllers
    Schuett, Carl
    Butts, Jonathan
    Dunlap, Stephen
    INTERNATIONAL JOURNAL OF CRITICAL INFRASTRUCTURE PROTECTION, 2014, 7 (01) : 61 - 68