Anomaly behavior analysis for building automation systems

Zhiwen Pan, Jesus Pacheco, Salim Hariri

Producción científica: Capítulo del libro/informe/acta de congresoContribución a la conferenciarevisión exhaustiva

9 Citas (Scopus)

Resumen

Advanced networking technology and increasing information services have led to extensive interconnection between Building Automation Systems (BAS) communication protocols and Internet, which makes Fog computing service a potential solution for automation of building end devices. However, the connection to Internet and public networks increases significantly the risk of the BAS networks being attacked due mainly to the significant increase in the attack surface. In this paper, we present an anomaly based Intrusion Detection System (IDS) that combines context awareness and Cyber DNA techniques to detect network misbehavior from security and functionality perspectives. We developed runtime models for service interactions and functionality patterns by modeling the information that is continuously acquired from building assets into two novel data structures: Protocol Context Aware and sensor-DNA. Our IDS uses Anomaly Behavior Analysis techniques to accurately detect anomalous events triggered by cyber-attacks or any failure. A classification of detected attacks allow our IDS to automatically launch protective countermeasures. We evaluate our approach in the Smart Building testbed developed at the University of Arizona Center for Cloud and Autonomic Computing, by launching several cyber-attacks that exploit the generic vulnerabilities of BAS.

Idioma originalInglés
Título de la publicación alojada2016 IEEE/ACS 13th International Conference of Computer Systems and Applications, AICCSA 2016 - Proceedings
EditorialIEEE Computer Society
ISBN (versión digital)9781509043200
DOI
EstadoPublicada - 2 jul. 2016
Evento13th IEEE/ACS International Conference of Computer Systems and Applications, AICCSA 2016 - Agadir, Marruecos
Duración: 29 nov. 20162 dic. 2016

Serie de la publicación

NombreProceedings of IEEE/ACS International Conference on Computer Systems and Applications, AICCSA
Volumen0
ISSN (versión impresa)2161-5322
ISSN (versión digital)2161-5330

Conferencia

Conferencia13th IEEE/ACS International Conference of Computer Systems and Applications, AICCSA 2016
País/TerritorioMarruecos
CiudadAgadir
Período29/11/162/12/16

Nota bibliográfica

Publisher Copyright:
© 2016 IEEE.

Huella

Profundice en los temas de investigación de 'Anomaly behavior analysis for building automation systems'. En conjunto forman una huella única.

Citar esto