MEDUSA: Mining Events to Detect Undesirable uSer Actions in SCADA
Hadziosmanovic, Dina and Bolzoni, Damiano and Hartel, Pieter (2010) MEDUSA: Mining Events to Detect Undesirable uSer Actions in SCADA. In: 13th International Symposium on Recent Advances in Intrusion Detection, RAID 2010, 15-17 Sep 2010, Ottawa, Canada.
Restricted to UT campus only: Request a copy
|Abstract:||Standard approaches for detecting malicious behaviors, e.g.
monitoring network traffic, cannot address process-related threats in
SCADA(Supervisory Control And Data Acquisition) systems. These
threats take place when an attacker gains user access rights and performs
actions which look legitimate, but which can disrupt the industrial process.
We believe that it is possible to detect such behavior by analysing
SCADA system logs. We present MEDUSA, an anomaly-based tool for
detecting user actions that may negatively impact the system.
|Item Type:||Conference or Workshop Item|
|Copyright:||© 2010 Springer|
Electrical Engineering, Mathematics and Computer Science (EEMCS)
|Link to this item:||http://purl.utwente.nl/publications/74581|
|Export this item as:||BibTeX|
Daily downloads in the past month
Monthly downloads in the past 12 months
Repository Staff Only: item control page