Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy最新文献

A Field Study of Digital Forensics of Intrusions in the Electrical Power Grid 电网入侵数字取证的现场研究

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808716

E. Sohl, C. Fielding, Tyler Hanlon, J. Rrushi, H. Farhangi, C. Howey, K. Carmichael, Joey Dabell

引用次数: 14

Eliminating Inter-Domain Vulnerabilities in Cyber-Physical Systems: An Analysis Contracts Approach 消除网络物理系统中的域间漏洞:一种分析契约方法

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808714

I. Ruchkin, Ashwini Rao, Dionisio de Niz, S. Chaki, D. Garlan

引用次数: 12

Secure and Resilient Control Design for Cloud Enabled Networked Control Systems 支持云的网络控制系统的安全和弹性控制设计

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808708

Zhiheng Xu, Quanyan Zhu

引用次数: 40

The Impact of Social Engineering on Industrial Control System Security 社会工程对工业控制系统安全的影响

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808717

B. Green, D. Prince, J. Busby, D. Hutchison

引用次数: 16

Attack Mitigation in Adversarial Platooning Using Detection-Based Sliding Mode Control 基于检测的滑模控制对抗队列攻击缓解

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808713

Imran Sajjad, D. D. Dunn, Rajnikant Sharma, Ryan M. Gerdes

引用次数: 24

On Passive Data Link Layer Fingerprinting of Aircraft Transponders 飞机应答器无源数据链路层指纹识别研究

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808712

Martin Strohmeier, I. Martinovic

{"title":"On Passive Data Link Layer Fingerprinting of Aircraft Transponders","authors":"Martin Strohmeier, I. Martinovic","doi":"10.1145/2808705.2808712","DOIUrl":"https://doi.org/10.1145/2808705.2808712","url":null,"abstract":"In order to meet future demands in increasingly congested airspaces, the world's aviation authorities are currently upgrading their air-traffic management systems. The Automatic Dependent Surveillance-Broadcast (ADS-B) protocol is at the core of the Next Generation Air Transportation (NextGen) system, and an increasingly large number of aircraft use ADS-B to broadcast data to their surroundings. In this paper, we use differences in the implementation of aircraft transponders to fingerprint their wireless drivers. In particular, without any modification to either aircraft or the off-the-shelf ADS-B receivers that we use, we develop a passive fingerprinting technique that accurately and efficiently identifies the wireless implementation by exploiting variations in their transmission behavior. We perform an evaluation of our fingerprinting technique that shows it both quickly and accurately fingerprints aircraft transponders using real-world aircraft data. Furthermore, through cross-referencing our fingerprints with open source aircraft databases, we are able to infer potential aircraft types and fleet combinations, as well as general market proliferation of different transponder implementations. Finally, we discuss implications for the security and privacy of our approach as well as potential mitigating factors.","PeriodicalId":144851,"journal":{"name":"Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124635251","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 29

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy 第一届ACM网络物理系统-安全和/或隐私研讨会论文集

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705

Mathias Payer, S. Mangard, E. Weippl, S. Katzenbeisser, A. Cárdenas, R. Bobba

{"title":"Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy","authors":"Mathias Payer, S. Mangard, E. Weippl, S. Katzenbeisser, A. Cárdenas, R. Bobba","doi":"10.1145/2808705","DOIUrl":"https://doi.org/10.1145/2808705","url":null,"abstract":"It is our great pleasure to welcome you to the Second ACM Workshop on Cyber-Physical Systems Security and PrivaCy (CPS-SPC) in conjunction with the 23rd ACM Conference on Computer and Communications Security (CCS) in Vienna, Austria. \u0000 \u0000Our increased dependency on cyber-physical systems (CPS) has amplified concerns of cyber attacks on these systems. These transformative attack methods require additional research into secure control systems and related architectures of CPS. The majority of the published literature addressing the security and privacy of CPS reflect a field still in its infancy; as such, the overall principles, models, and theories for securing CPS have not yet emerged. It is hoped that this workshop will provide a focal point for the research community to begin addressing the security and privacy of CPS in a comprehensive and multidisciplinary manner and, in tandem with other efforts, build a comprehensive research roadmap. As a workshop, we expect to attract papers that reflect ongoing work that are still \"works in progress\". \u0000 \u0000This year's workshop builds on the foundation laid last year to become one of the premier forums for presentation of interdisciplinary research results and experience reports at the interface of control theory, information security, embedded and real-time systems and human factors applied to CPS. The mission of the workshop is to create a community of researchers focusing on diverse aspects of CPS Security and Privacy, and to provide researchers and practitioners a premiere forum to share their perspectives with others interested in interdisciplinary approaches to solve the challenging security and privacy problems in CPS. \u0000 \u0000The workshop attracted 26 submissions from across 10 countries, and all papers were reviewed by at least three program committee members. 12 papers were accepted leading to a 46% acceptance rate.","PeriodicalId":144851,"journal":{"name":"Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131032123","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Secure RTOS Architecture for Building Automation 面向楼宇自动化的安全RTOS体系结构

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808709

Xiaolong Wang, M. Mizuno, M. Neilsen, Xinming Ou, S. R. Rajagopalan, Will G. Boldwin, Bryan Phillips

{"title":"Secure RTOS Architecture for Building Automation","authors":"Xiaolong Wang, M. Mizuno, M. Neilsen, Xinming Ou, S. R. Rajagopalan, Will G. Boldwin, Bryan Phillips","doi":"10.1145/2808705.2808709","DOIUrl":"https://doi.org/10.1145/2808705.2808709","url":null,"abstract":"Building Automation System (BAS) is a computer-based control system that is widely installed in office buildings and laboratories for monitoring and controlling mechanical/electrical equipment. With the advancements in Cyber-Physical System (CPS) and Internet of Things (IoTs), BAS is in the process of becoming more intelligent by merging computing resources and network communication with physical control. Along with potential benefits, it also brings tremendous risks of security breaches and safety violations, especially when it comes to Programmable Logic Controllers (PLCs). In this paper, we systematically analyze biocontainment laboratory control models based on real case scenarios from Biosecurity Research Institute (BRI) at Kansas State University. We present a vision for a new secure Real-Time Operating System (RTOS) architecture, which leverages various technologies, including microkernel structure, Trusted Platform Module (TPM), proxy-based policy enforcement, and formal verification. The secure RTOS architecture is designed specifically to work with embedded controllers which are widely used in BAS and other CPS to achieve a highly secure and trustworthy control system.","PeriodicalId":144851,"journal":{"name":"Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126164159","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Assurance Techniques for Industrial Control Systems (ICS) 工业控制系统(ICS)保证技术

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808710

W. Knowles, J. Such, Antonios Gouglidis, Gaurav Misra, A. Rashid

引用次数: 16

Scheduling Intrusion Detection Systems in Resource-Bounded Cyber-Physical Systems 资源有限网络物理系统中的入侵检测调度系统

Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy Pub Date : 2015-10-16 DOI: 10.1145/2808705.2808711

W. Abbas, Aron Laszka, Yevgeniy Vorobeychik, X. Koutsoukos

{"title":"Scheduling Intrusion Detection Systems in Resource-Bounded Cyber-Physical Systems","authors":"W. Abbas, Aron Laszka, Yevgeniy Vorobeychik, X. Koutsoukos","doi":"10.1145/2808705.2808711","DOIUrl":"https://doi.org/10.1145/2808705.2808711","url":null,"abstract":"In order to be resilient to attacks, a cyber-physical system (CPS) must be able to detect attacks before they can cause significant damage. To achieve this, emph{intrusion detection systems} (IDS) may be deployed, which can detect attacks and alert human operators, who can then intervene. However, the resource-constrained nature of many CPS poses a challenge, since reliable IDS can be computationally expensive. Consequently, computational nodes may not be able to perform intrusion detection continuously, which means that we have to devise a schedule for performing intrusion detection. While a uniformly random schedule may be optimal in a purely cyber system, an optimal schedule for protecting CPS must also take into account the physical properties of the system, since the set of adversarial actions and their consequences depend on the physical systems. Here, in the context of water distribution networks, we study IDS scheduling problems in two settings and under the constraints on the available battery supplies. In the first problem, the objective is to design, for a given duration of time $T$, scheduling schemes for IDS so that the probability of detecting an attack is maximized within that duration. We propose efficient heuristic algorithms for this general problem and evaluate them on various networks. In the second problem, our objective is to design scheduling schemes for IDS so that the overall lifetime of the network is maximized while ensuring that an intruder attack is always detected. Various strategies to deal with this problem are presented and evaluated for various networks.","PeriodicalId":144851,"journal":{"name":"Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security and/or PrivaCy","volume":"52 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130222091","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 13