检索结果-内蒙古大学图书馆

19th International Workshop on Data Privacy Management, DPM 2024, 8th International Workshop on Cryptocurrencies and Blockchain technology, CBT 2024 and 10th Workshop on the Security of Industrial Control Systems and of Cyber-Physical Systems, CyberICPS 2024 which were held in conjunction with the 29th European Symposium on Research in Computer Security, ESORICS 2024

作者： Kannelønning, Kristian Katsikas, Sokratis Department of Information Security and Communication Technology NTNU - Norwegian University of Science and Technology Postboks 191 Gjøvik2802 Norway

ISBN: (纸本)9783031823480

The escalating frequency of cyber attacks against industrial installations over the past decade underscores the growing imperative to fortify cybersecurity in organizations. The advent of Industry 4.0 has interconnected factories with the external world, intensifying cybersecurity risks. While international standards are advocated as a source of knowledge to enhance cybersecurity efforts, scant information exists regarding their applicability and usage in Industry 4.0. Diverse cybersecurity standards are available, either specialized for Information technology (IT) or operational technology (OT) or formulated as universal umbrella standards to guide organizations’ efforts. In this paper, two data sources are deployed - a Semi-Systematic Literature Review (SSLR) and interviews- to unveil the extent of utilization of cybersecurity standards for OT systems in the Industry and to identify potential barriers to cybersecurity standard usage. The results indicate a low applicability of cybersecurity standards within OT systems. Additionally, the size and lack of practical guidelines in OT cybersecurity standards act as entry barriers, especially for Small and Medium Enterprises (SMEs) with limited resources. The interviews reveal that the organizations mitigate the identified barriers by creating bespoke internal OT standards appropriate for the organization’s size and goals. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.

关键词： Cybersecurity standards IEC62443 Industry 4.0 operational technology

来源：评论

学校读者我要写书评

暂无评论

End-to-End Framework for Identifying Vulnerabilities of operational technology Protocols and Their Implementations in Industrial IoT

引用

FUTURE INTERNET 2025年第1期17卷

作者： Boeding, Matthew Hempel, Michael Sharif, Hamid Univ Nebraska Lincoln Dept Elect & Comp Engn Lincoln NE 68588 USA

The convergence of IT and OT networks has gained significant attention in recent years, facilitated by the increase in distributed computing capabilities, the widespread deployment of Internet of Things devices, and the adoption of Industrial Internet of Things. This convergence has led to a drastic increase in external access capabilities to previously air-gapped industrial systems for process control and monitoring. To meet the need for remote access to system information, protocols designed for the OT space were extended to allow IT networked communications. However, OT protocols often lack the rigor of cybersecurity capabilities that have become a critical characteristic of IT protocols. Furthermore, OT protocol implementations on individual devices can vary in performance, requiring the comprehensive evaluation of a device's reliability and capabilities before installation into a critical infrastructure production network. In this paper, the authors define a framework for identifying vulnerabilities within these protocols and their on-device implementations, utilizing formal modeling, hardware in the loop-driven network emulation, and fully virtual network scenario simulation. Initially, protocol specifications are modeled to identify any vulnerable states within the protocol, leveraging the Construction and Analysis of Distributed Processes (CADP) software (version 2022-d "Kista", which was created by Inria, the French Institute for Research in Computer Science and Automation, in France). Device characteristics are then extracted through automated real-time network emulation tests built on the OMNET++ framework, and all measured device characteristics are then used as a virtual device representation for network simulation tests within the OMNET++ software (version 6.0.1., a public-soucre, open-architecture software, initially developed by OpenSim Limited in Budapest, Hungary), to verify the presence of any potential vulnerabilities identified in the formal mod

关键词： IIoT vulnerability analysis formal verification construction and analysis of distributed processes CADP cyber-physical systems operational technology

来源：评论

学校读者我要写书评

暂无评论

A Systematic Literature Review of Current Research Trends in operational and Related technology Threats, Threat Detection, and Security Insurance

引用

APPLIED SCIENCES-BASEL 2025年第5期15卷

作者： Goranin, Nikolaj Ceponis, Dainius Cenys, Antanas Vilnius Gediminas Tech Univ Dept Informat Syst LT-10223 Vilnius Lithuania

The expansion of operation technology (OT) use and its tight integration with classical information and communication technologies have led not only to additional and improved possibilities in monitoring physical/manufacturing processes and the emergency of Industry 4.0 but also to a number of new threats, both related to the security of processed data and the safety of people, affected by physical processes and controlled by OT. Understanding potential threats has caused an increased demand for scientific research in the field, which is still relatively new and lacks established terminology. In this review paper, we aim to identify emerging trends and technologies in OT incident response, attack detection, applications of machine and deep learning for attack recognition, and security of OT protocols. An examination of research patterns from the Web of Science repository is performed to comprehend the panorama of publications and the present state of research in the area of OT security. The analysis shows a notable rise in publications concerning OT security, reflecting an increasing research interest. Proceeding articles and research articles were the predominant types of publications that were analyzed. The analysis further emphasizes the collaborative connections between researchers, academic institutions, and nations. Additionally, co-occurrence and citation analyses are carried out to offer an understanding of the associations between various keywords and/or research subjects. The study is finalized by suggesting future research directions on OT security. The uniqueness of this review lies in its focus on OT rather than the more commonly explored SCADA/ICS topics, attempting to cover a wider range of research topics instead of concentrating on a narrow area/method.

关键词： operational technology incident response attack detection datasets sensors machine learning deep learning intrusion detection anomaly detection OT attack detection/recognition OT protocol security OT security

来源：评论

学校读者我要写书评

暂无评论

HELOT-Hunting Evil Life in operational technology

引用

IEEE TRANSACTIONS ON SMART GRID 2023年第4期14卷 3058-3071页

作者： Akailvi, Syed Gautam, Uddhav Bhandari, Praveshika Rashid, Hadi Huff, Philip D. D. Springer, Jan P. P. UA Little Rock Dept Comp Sci Little Rock AR 72224 USA UA Little Rock Emerging Analyt Ctr Little Rock AR 72224 USA

operational technology (OT) refers to the industrial counterpart of information technology (IT). OT encompasses technology, systems, and protocols used in industrial operations for controlling, monitoring, and operating of industrial systems. Unlike standard IT systems, OT systems, such as those used in the industry, usually cannot be taken off-line in the event of postmortem forensics investigations. To remedy this situation we present a software architecture and prototype realization that allows the continuous capture of events within OT systems, IT systems, and the interconnected network(s). Our architecture can be realized with existing technologies while also allowing for extension and customization in functionality as well as application to diverse domains. We outline two application cases: capturing of forensics artifacts from a live OT system and possible paths for automation to reduce the cognitive load for cybersecurity operators in combined IT/OT environments.

关键词： Computer forensics cybersecurity operations operational technology power-delivery systems

来源：评论

学校读者我要写书评

暂无评论

An Analysis of Adversary-Centric Security Testing within Information and operational technology Environments

引用

DIGITAL THREATS: RESEARCH AND PRACTICE 2023年第1期4卷 1-29页

作者： Staves, Alexander Gouglidis, Antonios Hutchison, David Univ Lancaster Lancaster LA1 4WA England

Assurance techniques such as adversary-centric security testing are an essential part of the risk assessment process for improving risk mitigation and response capabilities against cyber attacks. While the use of these techniques, including vulnerability assessments, penetration tests, and red team engagements, is well established within Information technology (IT) environments, there are challenges to conducting these within operational technology (OT) environments, often due to the critical nature of the OT system. In this article, we provide an analysis of the technical differences between IT and OT from an asset management perspective. This analysis provides a base for identifying how these differences affect the phases of adversary-centric security tests within industrial environments. We then evaluate these findings by using adversary-centric security testing techniques on an industrial control system testbed. Results from this work demonstrate that while legacy OT is highly susceptible to disruption during adversary-centric security testing, modern OT that uses better hardware and more optimised software is significantly more resilient to tools and techniques used for security testing. Clear requirements can, therefore, be identified for ensuring appropriate adversary-centric security testing within OT environments by quantifying the risks that the tools and techniques used during such engagements present to the operational process.

关键词： Industrial Control Systems operational technology Information technology security testing risk

来源：评论

学校读者我要写书评

暂无评论

Leveraging operational technology and the Internet of things to attack smart buildings

引用

JOURNAL OF COMPUTER VIROLOGY AND HACKING TECHNIQUES 2021年第1期17卷 1-20页

作者： dos Santos, Daniel Ricardo Dagrada, Mario Costante, Elisa Forescout Technol John F Kennedylaan 2 NL-5612 AB Eindhoven Netherlands

In recent years, the buildings where we spend most part of our life are rapidly evolving. They are becoming fully automated environments where energy consumption, access control, heating and many other subsystems are all integrated within a single system commonly referred to as smart building (SB). To support the growing complexity of building operations, building automation systems (BAS) powering SBs are integrating consumer range Internet of things (IoT) devices such as IP cameras alongside with operational technology (OT) controllers and actuators. However, these changes pose important cybersecurity concerns since the attack surface is larger, attack vectors are increasing and attacks can potentially harm building occupants. In this paper, we analyze the threat landscape of BASs by focusing on subsystems which are strongly affected by the advent of IoT devices such as video surveillance systems and smart lightining. We demonstrate how BAS operation can be disrupted by simple attacks to widely used network protocols. Furthermore, using both known and 0-day vulnerabilities reported in the paper and previously disclosed, we present the first (at our knowledge) BAS-specific malware which is able to persist within the BAS network by leveraging both OT and IoT devices connected to the BAS. Our research highlights how BAS networks can be considered as critical as industrial control systems and security concerns in BASs deserve more attention from both industrial and scientific communities. Even within a simulated environment, our proof-of-concept attacks were carried out with relative ease and a limited amount of budget and resources. Therefore, we believe that well-funded attack groups will increasingly shift their focus towards BASs with the potential of impacting the live of thousands of people.

关键词： Building automation operational technology Internet of things Malware

来源：评论

学校读者我要写书评

暂无评论

Information-Centric Adoption and Use of Standard Compliant DevSecOps for operational technology: From Experience to Design Principles 14th

Information-Centric Adoption and Use of Standard Compliant D...

引用

14th International Conference on Software Business (ICSOB)

作者： Haverinen, Henry Paivarinta, Tero Vanska, Jussi Joutsijoki, Henry Cyberismo Oy Saarikonkuja 26 Lempaala 37500 Finland Univ Oulu Fac Informat Technol & Elect Engn M3S Oulu Finland Valmet Automat Oy Lentokentankatu 11 Tampere 33900 Finland Insta Automat Oy Sarankulmankatu 20 Tampere 33900 Finland

ISBN: (纸本)9783031532269;9783031532276

Secure and agile development of operational technology (OT) and related software in industry is a crucial but challenging issue. Generally recognized standards such as IEC 62443-4-1 set up the requirements for cybersecurity processes for OT and software development. The main challenge of IEC 62443-4-1 resides in its adoption and implementation in practice, which originates from the standard's complexity. We propose three novel design principles and two subsequent design objectives to be prioritized for future design-research oriented work on standard-compliant DevSecOps. The design principles have been formed after six years of experience and observations in cybersecurity consulting in industry, documented here as a piece of action design research (ADR). As a case study, we describe instantiation of the design principles at Valmet Automation Systems, one of the earliest IEC 62443-4-1 -certified companies. The proposed design principles altogether suggest for the information-centric viewon the contextual adoption and use of the IEC 62443-4-1 standard in DevSecOps practices for OT.

关键词： DevSecOps operational technology IEC 62443-4-1 design principle action design research information-centric adoption

来源：评论

学校读者我要写书评

暂无评论

Understanding operational technology Personnel's Mindsets and their Effect on Cybersecurity Perceptions: A Qualitative Study with operational technology Cybersecurity Practitioners 24

Understanding Operational Technology Personnel's Mindsets an...

引用

4th European Symposium on Usable Security

作者： Eviripidrou, Stefanos Watson, Jeremy Daniel McKendrick UCL Ctrr Doctrol Training Cybersecur London WC1E 6BT England UCL Dept Sci Technol Engn & Pub Policy STEaPP London England

ISBN: (纸本)9798400717963

operational technology (OT) is hardware and software that monitor and control industrial processes in sectors such as water and energy. OT's increased digitalisation which expanded its attack surface, heightened institutional pressures including regulation, and the evolving threat landscape have compelled companies using OT to improve their cybersecurity. Security often clashes with employees' values and hinders them from performing their primary job tasks, leading to its circumvention. OT personnel are a user group with distinctive characteristics, including the cyber-physical technology they use, and subsequently, their safety culture. Nevertheless, there's little research on how OT personnel's mindsets are formed, and in turn, how these mindsets affect their cybersecurity beliefs and behaviours. As such, we have conducted 72 interviews with OT cybersecurity practitioners across various sectors on their experiences working with OT practitioners. Our analysis demonstrates a number of factors that shape OT personnel's mindsets: namely, the prioritisation of other operational values, operational realities and challenges, and their occupational pathways. In turn, these factors lead to misperceptions around cybersecurity, specifically in two areas: technological misperceptions, and the stereotyping of occupational practices between IT and OT. Accordingly, we discuss OT cybersecurity practitioners' efforts to influence cybersecurity in these environments, and how the acknowledgment of these factors and misperceptions aids their efforts. Finally, we call for a better understanding of OT personnel's relationship with cybersecurity by proposing future research avenues.

关键词： operational technology Security Culture Mindsets Mental Models Cybersecurity Organisational Cybersecurity

来源：评论

学校读者我要写书评

暂无评论

Reconfigurable Network Slicing Orchestration in Network Function Virtualization Compatible operational technology Environment

Reconfigurable Network Slicing Orchestration in Network Func...

引用

2024 International Conference on Communications Control and Computing Technologies for Smart Grids

作者： Delgado, Brian G. Kodiles Aguayo, Jared M. Rivera, Abel O. Gomez Tosh, Deepak K. Univ Texas El Paso Dept Comp Sci El Paso TX 79968 USA Johns Hopkins Univ Appl Phys Lab Laurel MD USA Sandia Natl Labs Albuquerque NM USA

ISBN: (纸本)9798350318562;9798350318555

The ongoing transition to Industry 4.0, which is characterized by increased inter-connectivity of cyber-physical systems, requires having time-sensitive, high throughput, and secure transfer of critical data in industrial sites. In this context, network slicing emerges as a critical tool to ensure timely data delivery by provisioning the network resources to cater to specific applications' requirements and mitigating potential cyber attacks. To address these challenges, this paper aims to tackle two key questions essential for the successful implementation of network slicing in industrial environments. First, it investigates architectural considerations for developing a network infrastructure capable of supporting network slicing functionalities effectively. The proposed approach significantly improves deployment efficiency over traditional manual configurations. Second, it delves into the automated orchestration process, elucidating the steps and components involved in transitioning from a static network management approach to dynamically leverage network function virtualization schemes for creating network slices in ad-hoc manner. The system demonstrates high throughput suitable for production-level solutions and maintains exceptionally low latency, making it ideal for ultra-reliable low-latency communications. Even with increased network demands, the system remains stable, with effective Quality of Service (QoS) management, ensuring reliable performance under varying conditions. The proposed architecture outlines the necessary components, services, and communication protocols required for a production-level orchestrator for network segmentation in SCADA environments.

关键词： Cyber-Physical Systems Network Function Virtualization operational technology Software-Defined Network

来源：评论

学校读者我要写书评

暂无评论

Anomaly Detection in operational technology Systems using Non-Intrusive Load Monitoring Based on Supervised Learning

Anomaly Detection in Operational Technology Systems using No...

引用

4th IEEE Annual International Conference on Cyber Security and Resilience (IEEE CSR)

作者： Schroeder, A. McClure, P. Thulasiraman, P. Naval Postgrad Sch Monterey CA 93943 USA

ISBN: (纸本)9798350375367

When using operational technology (OT) across critical infrastructures, including Naval installations, it is important to implement robust anomaly detection mechanisms. Using non-intrusive load monitoring (NILM) techniques and methods, this paper leverages multiple supervised machine learning models to identify faults and anomalies in operational technology power systems. We build a novel small-scale OT and sensor system to generate a NILM data set into which we introduce four distinct single point faults and anomalies. We use three supervised ML algorithms (CNN, SVM and LSTM) to facilitate detection and classification of these various anomalies. Through vigorous evaluation, our results show the potential of integrating NILM technology with ML to enhance OT security and resiliency. This research not only fills a critical gap in OT anomaly detection but also sets a precedent for future advancements in the field.

关键词： machine learning NILM operational technology power systems anomaly fault

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：