A Review of SCADA Anomaly Detection Systems

  • Iñaki Garitano
  • Roberto Uribeetxeberria
  • Urko Zurutuza
Conference paper

DOI: 10.1007/978-3-642-19644-7_38

Part of the Advances in Intelligent and Soft Computing book series (AINSC, volume 87)
Cite this paper as:
Garitano I., Uribeetxeberria R., Zurutuza U. (2011) A Review of SCADA Anomaly Detection Systems. In: Corchado E., Snášel V., Sedano J., Hassanien A.E., Calvo J.L., Ślȩzak D. (eds) Soft Computing Models in Industrial and Environmental Applications, 6th International Conference SOCO 2011. Advances in Intelligent and Soft Computing, vol 87. Springer, Berlin, Heidelberg

Abstract

The security of critical infrastructures is decreasing due to the apparition of new cyber threats against Supervisory Control and Data Acquisition (SCADA) systems. The evolution they have experienced; the use of standard hardware and software components or the increase of interconnected devices in order to reduce costs and improve efficiency, have contributed to this. This work reviews the research effort done towards the development of anomaly detection for these specific systems. SCADA systems have a number of peculiarities that make anomaly detection perform better than in traditional information and communications technology (ICT) networks. SCADA communications are deterministic, and their operation model is often cyclical. Based on this premise, modeling normal behavior by mining specific features gets feasible.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2011

Authors and Affiliations

  • Iñaki Garitano
    • 1
  • Roberto Uribeetxeberria
    • 1
  • Urko Zurutuza
    • 1
  1. 1.Electronics and Computing DepartmentMondragon UniversityArrasate-MondragonSpain

Personalised recommendations