1. A Review of Research Work on Network-Based SCADA Intrusion Detection Systems
- Author
-
Mirjana Stojanović, Slavica V. Bostjancic Rakas, and Jasna D. Markovic-Petrovic
- Subjects
General Computer Science ,Computer science ,0211 other engineering and technologies ,02 engineering and technology ,Intrusion detection system ,specification-based detection ,SCADA ,0202 electrical engineering, electronic engineering, information engineering ,network security ,General Materials Science ,Anomaly-based detection ,Architecture ,021110 strategic, defence & security studies ,business.industry ,General Engineering ,020206 networking & telecommunications ,signature-based detection ,Application layer ,Future study ,Work (electrical) ,Systems engineering ,The Internet ,lcsh:Electrical engineering. Electronics. Nuclear engineering ,business ,lcsh:TK1-9971 - Abstract
Specific intrusion detection systems (IDSs) are needed to secure modern supervisory control and data acquisition (SCADA) systems due to their architecture, stringent real-time requirements, network traffic features and specific application layer protocols. This article aims to contribute to assess the state-of-the-art, identify the open issues and provide an insight for future study areas. To achieve these objectives, we start from the factors that impact the design of dedicated intrusion detection systems in SCADA networks and focus on network-based IDS solutions. We propose a structured evaluation methodology that encompasses detection techniques, protected protocols, implementation tools, test environments and IDS performance. Special attention is focused on assessing implementation maturity as well as the applicability of each surveyed solution in the Future Internet environment. Based on that, we provide a brief description and evaluation of 26 selected research papers, published in the period 2015-2019. Results of our analysis indicate considerable progress regarding the development of machine learning-based detection methods, implementation platforms, and to some extent, sophisticated testbeds. We also identify research gaps and conclude the analysis with a list of the most important directions for further research.
- Published
- 2020