Intrusion detection system for SCADA networks

Aleksey Ashikhmin, James Graham, Ahmed Desoky, Benjamin Arazi

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

2 Scopus citations

Abstract

This paper presents a new approach for detecting intrusions in SCADA system. The field intrusion detection system (FIDS) presented here is based on hierarchical principal component analysis (HPCA). For testing purposes network traffic from an actual SCADA system, which controls a chemical distillation process, was used for offline analysis and evaluation of the proposed intrusion detection system. Detailed analysis of the FIDS unit is discussed in this paper, including the receiver operating characteristic (ROC) curve and scalability considerations. Initial experimental intrusion detection results are promising, as is the projected scalability of the detection system to larger installations.

Original languageEnglish
Title of host publication24th International Conference on Computers and Their Applications 2009, CATA 2009
Pages156-161
Number of pages6
StatePublished - 1 Dec 2009
Externally publishedYes
Event24th International Conference on Computers and Their Applications 2009, CATA 2009 - New Orleans, LA, United States
Duration: 8 Apr 200910 Apr 2009

Publication series

Name24th International Conference on Computers and Their Applications 2009, CATA 2009

Conference

Conference24th International Conference on Computers and Their Applications 2009, CATA 2009
Country/TerritoryUnited States
CityNew Orleans, LA
Period8/04/0910/04/09

Keywords

  • Computer Security
  • Network Intrusion Detection
  • Principal Components Analysis
  • SCADA

ASJC Scopus subject areas

  • Computer Science Applications

Fingerprint

Dive into the research topics of 'Intrusion detection system for SCADA networks'. Together they form a unique fingerprint.

Cite this