Abstract
Advanced networking technology and increasing information services have led to extensive interconnection between Building Automation Systems (BAS) communication protocols and Internet, which makes Fog computing service a potential solution for automation of building end devices. However, the connection to Internet and public networks increases significantly the risk of the BAS networks being attacked due mainly to the significant increase in the attack surface. In this paper, we present an anomaly based Intrusion Detection System (IDS) that combines context awareness and Cyber DNA techniques to detect network misbehavior from security and functionality perspectives. We developed runtime models for service interactions and functionality patterns by modeling the information that is continuously acquired from building assets into two novel data structures: Protocol Context Aware and sensor-DNA. Our IDS uses Anomaly Behavior Analysis techniques to accurately detect anomalous events triggered by cyber-attacks or any failure. A classification of detected attacks allow our IDS to automatically launch protective countermeasures. We evaluate our approach in the Smart Building testbed developed at the University of Arizona Center for Cloud and Autonomic Computing, by launching several cyber-attacks that exploit the generic vulnerabilities of BAS.
Original language | English |
---|---|
Title of host publication | 2016 IEEE/ACS 13th International Conference of Computer Systems and Applications, AICCSA 2016 - Proceedings |
Publisher | IEEE Computer Society |
Volume | 0 |
ISBN (Electronic) | 9781509043200 |
DOIs | |
State | Published - 9 Jun 2017 |
Externally published | Yes |
Event | 13th IEEE/ACS International Conference of Computer Systems and Applications, AICCSA 2016 - Agadir, Morocco Duration: 29 Nov 2016 → 2 Dec 2016 |
Conference
Conference | 13th IEEE/ACS International Conference of Computer Systems and Applications, AICCSA 2016 |
---|---|
Country | Morocco |
City | Agadir |
Period | 29/11/16 → 2/12/16 |
Keywords
- Anomaly Behavior Analysis
- Building Automation System
- Fog computing
- Internet of Things
- Intrusion Detection System