2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS)最新文献

Studying Secure Coding in the Laboratory: Why, What, Where, How, and Who? 在实验室研究安全编码:为什么，什么，在哪里，怎么做，谁?

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/EnCyCriS59249.2023.00008

Ita Ryan, Klaas-Jan Stol, U. Roedig

引用次数: 1

Evaluating Moving Target Defenses against Realistic Attack Scenarios 评估针对现实攻击场景的移动目标防御

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/EnCyCriS59249.2023.00005

Alex Brown, Tze-Wen Lee, Jin B. Hong

引用次数: 1

Autoencoder via DCNN and LSTM Models for Intrusion Detection in Industrial Control Systems of Critical Infrastructures 基于DCNN和LSTM模型的自编码器在关键基础设施工业控制系统中的入侵检测

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/EnCyCriS59249.2023.00006

Kayode Yakub Saheed, S. Misra, S. Chockalingam

{"title":"Autoencoder via DCNN and LSTM Models for Intrusion Detection in Industrial Control Systems of Critical Infrastructures","authors":"Kayode Yakub Saheed, S. Misra, S. Chockalingam","doi":"10.1109/EnCyCriS59249.2023.00006","DOIUrl":"https://doi.org/10.1109/EnCyCriS59249.2023.00006","url":null,"abstract":"Industrial Control Systems (ICS) are widely used to carry out the fundamental functions of a society and are frequently employed in Critical Infrastructures (CIs). Consequently, protection against cyber-attacks is essential for these systems. Over the years, numerous cyber-attack detection system concepts have been proposed, each employing a distinct set of processes and methodologies. Despite this, there is a significant gap in the field of techniques for detecting cyber-attacks on ICS. Most existing studies used device logs, which require considerable pre-processing and understanding before they can be utilized for intrusion detection in an ICS environment. In this paper, we proposed an intrusion detection using an autoencoder for feature dimensionality reduction trained on network flow data via a Deep Convolutional Neural Network (DCNN) and Long Short-Term Memory (LSTM), which does not require prior knowledge of the underlying architecture and network's topology. The experimental analysis was performed on the ICS dataset and gas pipeline data given by Mississippi State University (MSU). The LSTM model achieved an accuracy greater than 99% and an AUC-ROC of 99.50% on the ICS data, whereas the DCNN model achieved an accuracy of 96.0% and an AUC-ROC of 97.20% on the gas pipeline network data, with extremely low false negatives and false positives. The results of the study showed that LSTM is superior to DCNN in detecting anomalies in ICS. In addition, the results disclosed that LSTM and DCNN are effective at time series prediction tasks. This observation is encouraging, as DCNN and LSTM are smaller, faster, and more straightforward than the deep neural network and recurrent neural networks utilized in previous research. The proposed IDS architecture is a low-cost, network-based solution that requires minimal processing, performs unsupervised, and is straightforward to implement in a real-world environment.","PeriodicalId":198704,"journal":{"name":"2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS)","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115976027","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

The State of Secure Coding Practice: Small Organisations and “Lone, Rogue Coders” 安全编码实践的现状:小型组织和“孤独、流氓编码者”

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/EnCyCriS59249.2023.00010

Ita Ryan, Klaas-Jan Stol, U. Roedig

{"title":"The State of Secure Coding Practice: Small Organisations and “Lone, Rogue Coders”","authors":"Ita Ryan, Klaas-Jan Stol, U. Roedig","doi":"10.1109/EnCyCriS59249.2023.00010","DOIUrl":"https://doi.org/10.1109/EnCyCriS59249.2023.00010","url":null,"abstract":"Software security is a rapidly developing problem. Malware, ransomware and spyware routinely leverage vulnerabilities in software to gain access to systems, escalate privileges and run adversarial code. One approach to solving this issue is to use secure software methods, which attempt to guide organisations in improving their software assurance. However, these methods implicitly assume the presence of substantial resources deployed in a compliance-mandated environment. The distinct and often limited environment in which small organisations, independent teams and lone coders operate is not considered. Advice for software security in small teams is almost absent from the literature, as is a way to measure the levels of secure coding in such teams. In order to address this problem, we must begin by understanding it. As part of the analysis of a large survey on current software security practice, we examined the current software security practices of small and open source organisations, and of lone and non-company developers. We present our results in this paper. We hope that they will facilitate the targeting of security advice to these neglected developer categories.","PeriodicalId":198704,"journal":{"name":"2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS)","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127909987","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

EnCyCriS 2023 Committees EnCyCriS 2023委员会

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/encycris59249.2023.00013

引用次数: 0

Functional Cyber-Resilience - Extending the Cybersecurity Paradigm in Critical Infrastructures 功能网络弹性——在关键基础设施中扩展网络安全范式

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/EnCyCriS59249.2023.00007

J. Haan

引用次数: 1

Foreword from the EnCyCriS 2023 Organizers 《2023年百科全书》组织者的前言

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/encycris59249.2023.00012

引用次数: 0

Cryptography Based Security for the ATM Surveillance Chain 基于密码学的ATM监控链安全

2023 IEEE/ACM 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) Pub Date : 2023-05-01 DOI: 10.1109/EnCyCriS59249.2023.00009

J. Haan, Abdel Youssouf

引用次数: 1