Leveraging Software-Defined Networking for Incident Response in Industrial Control Systems

In the past decade, the security of industrial control systems has emerged as a research priority in order to safeguard our critical infrastructures. A large number of research efforts have focused on intrusion detection in industrial networks; however, few of them discuss what to do after an intrus...

Full description

Saved in:
Bibliographic Details
Published inIEEE software Vol. 35; no. 1; pp. 44 - 50
Main Authors Murillo Piedrahita, Andres F., Gaur, Vikram, Giraldo, Jairo, Cardenas, Alvaro A., Rueda, Sandra Julieta
Format Journal Article
LanguageEnglish
Published Los Alamitos IEEE 01.01.2018
IEEE Computer Society
Subjects
Automatic control
Computer security
Control systems
Cyber-physical systems
Cybersecurity
Defense industry
incident response
industrial control systems
Industrial electronics
Integrated circuits
Intrusion detection systems
network function virtualization
NFV
Safety
SDN
Sensors
Software defined networking
Software development
Software engineering
software safety
software security
software-defined networks
Virtual networks
Online AccessGet full text

Cover

More Information
Summary:In the past decade, the security of industrial control systems has emerged as a research priority in order to safeguard our critical infrastructures. A large number of research efforts have focused on intrusion detection in industrial networks; however, few of them discuss what to do after an intrusion has been detected. Because the safety of most of these control systems is time sensitive, we need new research on automatic incident response. This article shows how software-defined networks and network function virtualization can facilitate automatic incident response to a variety of attacks against industrial networks. It also presents a prototype of an incident-response solution that detects and responds automatically to sensor attacks and controller attacks. This work shows the promise that cloud-enabled software-defined networks and virtual infrastructures hold as a way to provide novel defense-in-depth solutions for industrial systems. This article is part of a special issue on Software Safety and Security Risk Mitigation in Cyber-physical Systems.
ISSN:0740-7459
1937-4194
DOI:10.1109/MS.2017.4541054