Secure VM for Monitoring Industrial Process Controllers
By:
Dasgupta, Dipankar ; Ali, Mohammad; Abercrombie, Robert K; Schlicher, Bob G; Sheldon, Frederick T; Carvalho, Marco
Page Number:
1-4
Volume:
1
Book Title:
Cyber Security and Information Intelligence Research Workshop (CSIIRW'11) Proceedings
Publication Date:
May 2012
Publisher Location:
Association for Computing Machninery (ACM), New York, New Jersey, United States of America
Conference Name:
7th Annual Cyber Security and Information Intelligence Research Workshop
Conference Location:
Oak Ridge, Tennessee, United States of America
Conference Sponsor:
ORNL, UT
Abstract
In this paper, we examine the biological immune system as an autonomic system for self-protection, which has evolved over millions of years probably through extensive redesigning, testing, tuning and optimization process. The powerful information processing capabilities of the immune system, such as feature extraction, pattern recognition, learning, memory, and its distributive nature provide rich metaphors for its artificial counterpart. Our study focuses on building an autonomic defense system, using some immunological metaphors for information gathering, analyzing, decision making and launching threat and attack responses. In order to detection Stuxnet like malware, we propose to include a secure VM (or dedicated host) to the SCADA Network to monitor behavior and all software updates. This on-going research effort is not to mimic the nature but to explore and learn valuable lessons useful for self-adaptive cyber defense systems.