Context aware intrusion detection for building automation systems

doi:10.1016/j.cose.2019.04.011

	Context aware intrusion detection for building automation systems
	Pan, Zhiwen 1; Hariri, Salim 2; Pacheco, Jesus 2
	2019-08-01
发表期刊	COMPUTERS & SECURITY
ISSN	0167-4048
卷号	85 页码:181-201
摘要	The Internet of Things (loT) will connect not only computers and mobile devices, but also smart cities, buildings, and homes, as well as electrical grids, gas, and water networks, automobiles, airplanes, etc. IoT will lead to extensive interconnection between Building Automation Systems (BAS) communication protocols and the Internet. The connection to Internet and public networks increases significantly the risk of the BAS networks being attacked, since there's a significant lack of detection and defensive mechanisms for BAS networks. In this paper, we present a framework for a context-aware intrusion detection of a widely deployed Building Automation and Control network. We developed runtime models for service interactions and functionality patterns by modeling the heterogeneous information that is continuously acquired from building assets into a novel BAS context aware data structure. Our IDS performs anomaly based behavior analysis to accurately detect anomalous events triggered by cyber-attacks or any functional failure. An attack classification and severity analysis of detected attacks allow our IDS to automatically launch protective countermeasures. We evaluate our approach in the Smart Building testbed developed at the University of Arizona Center for Cloud and Autonomic Computing, by launching several cyber-attacks that exploit the generic vulnerabilities of BACnet protocol. (C) 2019 Elsevier Ltd. All rights reserved.
关键词	Internet of Things Network security Context awareness Supervised learning Data mining Intrusion detection
DOI	10.1016/j.cose.2019.04.011
收录类别	SCI
语种	英语
WOS研究方向	Computer Science
WOS类目	Computer Science, Information Systems
WOS记录号	WOS:000475993700012
出版者	ELSEVIER ADVANCED TECHNOLOGY
引用统计	被引频次：25[WOS] [WOS记录] [WOS相关记录]
文献类型	期刊论文
条目标识符	http://119.78.100.204/handle/2XEOYT63/4526
专题	中国科学院计算技术研究所期刊论文_英文
通讯作者	Pan, Zhiwen
作者单位	1.Chinese Acad Sci, Inst Comp Technol, Beijing, Peoples R China 2.Univ Arizona, Dept Elect & Comp Engn, Tucson, AZ 85719 USA
推荐引用方式 GB/T 7714	Pan, Zhiwen,Hariri, Salim,Pacheco, Jesus. Context aware intrusion detection for building automation systems[J]. COMPUTERS & SECURITY,2019,85:181-201.
APA	Pan, Zhiwen,Hariri, Salim,&Pacheco, Jesus.(2019).Context aware intrusion detection for building automation systems.COMPUTERS & SECURITY,85,181-201.
MLA	Pan, Zhiwen,et al."Context aware intrusion detection for building automation systems".COMPUTERS & SECURITY 85(2019):181-201.