Embedded field devices that sense and control physical processes in critical infrastructure are soft targets for cyber-attack because they lack the fundamental features for existing cyber security monitoring and control. In this paper we present a new platform to collect and fuse data across multiple cyber and physical streams from these field devices to enable the host based attack detection and security control capabilities that have become common within IT environments. Experiments of different attack behaviors are discussed and initial machine learning detection approach analysis is presented.
Revised: November 26, 2019 |
Published: April 18, 2019
Citation
Rice T.R., G.E. Seppala, T.W. Edgar, D.M. Cain, and E.Y. Choi. 2019.Fused Sensor Analysis and Advanced Control of Industrial Field Devices for Security: Cymbiote Multi-Source Sensor Fusion Platform. In Proceedings of the Northwest Cybersecurity Symposium (NCS 2019), April 8-10, 2019, Richland, WA, Article No. 3. New York, New York:ACM.PNNL-SA-141222.doi:10.1145/3332448.3332455