Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems最新文献

Trustworthy Data Analysis and Sensor Data Protection in Cyber-Physical Systems 网络物理系统中可信数据分析与传感器数据保护

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3445969.3450432

D. Ulybyshev, Ibrahim Yilmaz, B. Northern, V. Kholodilo, Mike Rogers

{"title":"Trustworthy Data Analysis and Sensor Data Protection in Cyber-Physical Systems","authors":"D. Ulybyshev, Ibrahim Yilmaz, B. Northern, V. Kholodilo, Mike Rogers","doi":"10.1145/3445969.3450432","DOIUrl":"https://doi.org/10.1145/3445969.3450432","url":null,"abstract":"Cyber-Physical Systems are widely used in critical infrastructures such as the power grids, water purification systems, nuclear plants, oil refinery and compressor plants, food manufacturing, etc. Anomalies in these systems can be a result of cybersecurity attacks, failed sensors or communication channels. Undetected anomalies may lead to process failure, cause financial damage and have significant impact on human lives. Thus, it is important to detect anomalies at early stages and to protect data in Cyber-Physical Systems. In this paper, we propose the novel on-the-fly NIST-compliant key generation scheme for a secure data container used to transfer and store sensor data. The data container delivers data from the low-level field sensors to high-level data analysis servers in a protected form. It provides data confidentiality and integrity, as well as data origin integrity, a fine-grained role-based and attribute-based access control. As a result, the anomaly detector runs on trustworthy data sets, protected from unauthorized adversarial modifications. Our solution can be easily integrated with many existing Cyber-Physical Systems and IT infrastructures since our secure data container supports RESTful API and is implemented in two modifications: (1) signed, watermarked and encrypted spreadsheet file; (2) signed and encrypted JSON file. In addition, we implemented several machine learning models based on a Random Forest, a k-Nearest Neighbors, a Support Vector Machine and a Neural Network algorithms for the detection of various anomalies and attacks in a gas pipeline system. We will demonstrate that our anomaly detection models achieve high detection rate with an average accuracy of 97.7% for two industrial data sets collected by the Mississippi State University's Critical Infrastructure Protection Center and Oak Ridge National Laboratories (ORNL)","PeriodicalId":103324,"journal":{"name":"Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-04-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115150565","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

A Matrix for Systematic Selection of Authentication Mechanisms in Challenging Healthcare related Environments 在具有挑战性的医疗保健相关环境中系统选择身份验证机制的矩阵

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3445969.3450424

Michael Grabatin, M. Steinke, Daniela Pöhn, Wolfgang Hommel

引用次数: 2

Generating Threat Models and Attack Graphs based on the IEC 61850 System Configuration description Language 基于IEC 61850系统配置描述语言生成威胁模型和攻击图

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3445969.3450421

E. Ling, M. Ekstedt

引用次数: 9

Artificial Intelligence Assisted Malware Analysis 人工智能辅助恶意软件分析

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3445969.3450433

Mahmoud Abdelsalam, Maanak Gupta, Sudip Mittal

引用次数: 3

A Data-based Protocol for One-way Trust in Inter-vehicular Communication 基于数据的车际通信单向信任协议

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3445969.3450430

Stephen Ly, Yuan Cheng

{"title":"A Data-based Protocol for One-way Trust in Inter-vehicular Communication","authors":"Stephen Ly, Yuan Cheng","doi":"10.1145/3445969.3450430","DOIUrl":"https://doi.org/10.1145/3445969.3450430","url":null,"abstract":"As autonomous vehicles fill the roads and more manufacturers join the trend, the need for a unified communication protocol grows. Current paradigms in vehicle-to-vehicle communication are too slow to provide accurate and meaningful traffic data in a timely fashion, and it is difficult to trust that incoming data is correct without an authoritative server verifying the sender's identity. This paper introduces a protocol for peer-to-peer exchanges of positional data that determines the trust level of a particular message by comparing matching object data hashes. Similar in concept to non-interactive zero-knowledge proofs, the design retains the privacy and anonymity of senders and is relatively fast compared to certificate-based solutions under a reasonable traffic load. Our preliminary experiment shows promising results, with much faster runtimes compared to similar cryptographic solutions. Although the current implementation is still rough around the edges, the basic design can provide the groundwork for future paradigms in inter-vehicular communication without depending on expensive cryptographic operations performed on special or more powerful hardware. This opens doors for protocols that can be run on current vehicles without requiring the collective processing power of all vehicles to increase.","PeriodicalId":103324,"journal":{"name":"Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-04-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132182528","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Vulnerability Assessment of the Rowhammer Attack Using Machine Learning and the gem5 Simulator - Work in Progress 使用机器学习和gem5模拟器的Rowhammer攻击漏洞评估-正在进行中

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3445969.3450425

Loïc France, M. Mushtaq, Florent Bruguier, D. Novo, P. Benoit

引用次数: 9

A Flexible Security Analytics Service for the Industrial IoT 面向工业物联网的灵活安全分析服务

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3445969.3450427

Philip Empl, G. Pernul

{"title":"A Flexible Security Analytics Service for the Industrial IoT","authors":"Philip Empl, G. Pernul","doi":"10.1145/3445969.3450427","DOIUrl":"https://doi.org/10.1145/3445969.3450427","url":null,"abstract":"In Cloud Computing, the cloud serves as a central data hub for the Industrial Internet of Things' (IIoT) data and is deployed in diverse application fields, e.g., Smart Grid or Smart Manufacturing. Therefore, the aggregated and contextualized data is bundled in a central data hub, bringing tremendous cybersecurity advantages. Given the threat landscape in IIoT systems, especially SMEs (small and medium-sized enterprises) need to be prepared regarding their cybersecurity, react quickly, and strengthen their overall cybersecurity. For instance, with the application of machine learning algorithms, security-related data can be analyzed predictively in order to be able to ward off a potential attack at an early stage. Since modern reference architectures for IIoT systems, such as RAMI 4.0 or IIRA, consider cybersecurity approaches on a high level and SMEs lack financial funds and knowledge, this paper conceptualizes a security analytics service used as a security add-on to these reference architectures. Thus, this paper conceptualizes a flexible security analytics service that implements security capabilities with flexible analytical techniques that fit specific SMEs' needs. The security analytics service is also evaluated with a real-world use case.","PeriodicalId":103324,"journal":{"name":"Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-04-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127821002","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Session details: Session 3: Tutorial 会话详细信息:会话3:教程

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3460497

Mahmoud Abdelsalam

引用次数: 0

Session details: Session 4: Miscellaneous Topics 会议详情:会议4:Miscellaneous Topics

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3460498

Nisha Panwar

引用次数: 0

Session details: Session 1: AI for CPS Security 会话详细信息:会话1:AI for CPS Security

Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems Pub Date : 2021-04-28 DOI: 10.1145/3460495

Heena Rathore

引用次数: 0