Development and integration of specialized probes for IACS applications
Sequeira, Filipe José Santa Bárbara
MSc Thesis · 2018 · University of Coimbra
Supervisors: Paulo Alexandre Ferreira Simões, Tiago José dos Santos Martins da Cruz
Abstract
With the emergence of the Industry 4.0 paradigm, Industrial Automation and Control Systems are becoming highly distributed, making them increasingly prone to cyber-attacks, particularly when compared with previous Industrial Control System generations. To cope with the increased complexity and dimension of such infrastructures, it is necessary to use a diversified set of security probes/components.However, the integration of new and already existing security probes into existing Intrusion and Anomaly Detection System platforms is no easy task. This is mostly due to the lack of common/standard communication protocols and APIs, as well as suitable data models (for configuration and eventing). This is crucial to simplify and streamline the configuration and monitoring processes but also the provisioning and registration of those mechanisms, used for such specialised agents.With this in mind, this thesis will focus on developing a coupling layer, providing the means to integrate agents/probes in an Intrusion and Anomaly Detection System platform. This layer will provide the necessary generic adaptors to implement homogeneous management and event capabilities for agent/probe integration, as well as the required server-side components .