Intrusion Detection Methodology for SCADA system environment based on traffic self-similarity property
Pauline Koh, Hwa-Jae Choi, Se-Ryoung Kim, Hyukmin Kwon, Huy-Kang Kim · Information Security and Cryptology · 2012
SCADA system is a computer system that monitors and controls the national infrastructure or industrial process including transportation facilities, water treatment and distribution, electrical power transmission and distribution, and gas pipelines. The SCADA system has been operated in a closed network, but it changes to open network as information and communication technology is developed rapidly. As the way of connecting with outside user extends, the possibility of exploitation of vulnerability of SCADA system gets high. The methodology to protect the possible huge damage caused by malicious user should be developed. In this paper, we proposed anomaly detection based intrusion detection methodology by estimating self-similarity of SCADA system.