Systems that ensure the supervision and control of a series of processes involved in the production and delivery of goods and services, from assembly lines to power plants. In fact, several universal and essential services, such as utility or telecommunications infrastructures, which are crucial to maintain the social, industrial, economic and security status of a modern country, depend on IACS.
Published in Chapter:
Evolving the Security Paradigm for Industrial IoT Environments
Luis Rosa (Department of Informatics Engineering, University of Coimbra, Portugal), Miguel Borges de Freitas (Department of Informatics Engineering, University of Coimbra, Portugal), João Henriques (Department of Informatics Engineering, University of Coimbra, Portugal), Pedro Quitério (Department of Informatics Engineering, University of Coimbra, Portugal), Filipe Caldeira (University of Coimbra and Polytechnic Institute of Viseu, Portugal), Tiago Cruz (Department of Informatics Engineering, University of Coimbra, Portugal), and Paulo Simões (Department of Informatics Engineering, University of Coimbra, Portugal)
Copyright: © 2020
|Pages: 22
DOI: 10.4018/978-1-7998-2910-2.ch004
Abstract
In recent years, IACS (Industrial Automation and Control Systems) have become more complex, due to the increasing number of interconnected devices. This IoT (internet of things)-centric IACS paradigm, which is at the core of the Industry 4.0 concept, expands the infrastructure boundaries beyond the aggregated-plant, mono-operator vision, being dispersed over a large geographic area. From a cybersecurity-centric perspective, the distributed nature of modern IACS makes it difficult not only to understand the nature of incidents but also to assess their progression and threat profile. Defending against those threats is becoming increasingly difficult, requiring orchestrated and collaborative distributed detection, evaluation, and reaction capabilities beyond the scope of a single entity. This chapter presents the Intrusion and Anomaly Detection System platform architecture that was designed and developed within the scope of the ATENA H2020 project, to address the specific needs of distributed IACS while providing (near) real-time cybersecurity awareness.