Improving Cyber-Security Awareness on Industrial Control Systems: The CockpitCI Approach
ABSTRACT
Cyber-threats are one of the most significant problems faced by modern Industrial Control Systems (ICS), such as SCADA (Supervisory Control and Data Acquisition) systems, as the vulnerabilities of ICS technology become serious threats that can ultimately compromise human lives. This situation demands a domain-specific approach to cyber threat detection within ICS, which is one of the most important contributions of the CockpitCI FP7 project (http://CockpitCI.eu). Specifically, this paper will present the CockpitCI cyber-detection and analysis layer, including a description of its components, in terms of role, operation, and remote management.
AUTHORS
Department of Informatics Engineering, University of Coimbra,
Portugal
Tiago Cruz has been an Assistant Professor at the Department of Informatics Engineering at the University of Coimbra since 2013, where he obtained his PhD in Informatics Engineering in 2012. His research interests cover areas such as management systems for communications infrastructures and services, embedded computing, critical infrastructure security, IoT and SDN/ NFV. The author of more than 70 publications, including book chapters, journal articles, and conference papers, he has also been involved in various international and national research projects. He is a member of the IEEE Communications Society and an IEEE senior member.
Department of Informatics Engineering, University of Coimbra,
Portugal
Paulo Simões is a Tenured Assistant Professor at the Department of Informatics Engineering of the University of Coimbra, Portugal, where he obtained his doctoral degree in 2002. He has been involved in in several European research projects and led several industry-funded technology transfer projects for telecommunications operators and energy utilities. His research interests include Network and Infrastructure Management Security, as well as Critical Infrastructure Protection.
Department of Informatics Engineering, University of Coimbra,
Portugal
Jorge Proença is a PhD student in Informatics Engineering at the University of Coimbra. He received his M.Sc. degree from the same institution in 2012. Since then he has served as a junior researcher at the Centre for Informatics and Systems of the University of Coimbra (CISUC), where he participates in several research projects in the fields of security and critical infrastructure protection.
iTrust Consulting
Luxembourg
Matthieu Aubigny is an IT Security Consultant working at itrust consulting since October 2008. He is Head of R&D department and Quality Manager for itrust. As security expert, his work leads him to manage both security audit and consulting for European institutions and private companies, research projects on, for example, security for Galileo localization service, Critical Infrastructure Protection, and Privacy. He graduated as a polytechnic engineer from ENSAM Paris, with a specialisation in the electronic and automatism area; he also graduated as a Bachelor in Philosophy and as Masters in Theology at Metz University and ICP Paris, and as professional Master in Security Management of SI at University of Luxembourg. Although a large part of his professional experience has taken place in the spiritual and philosophic area, he has had experiences in microchip research, voice recognition technology, and as teacher and consultant in the computer technologies (hardware and software). His works lead him regularly to apply security standards (ISO 27fff, ISO15408) and to develop new standardised approaches to meet the needs in security of the customers. He is a member of the group of experts of the ILNAS on the Standards ISO/IEC concerning technical IT Security and in charge of the working group n°3 (JTC1/ SC27 / WG3) on security evaluation criteria . He is also technical expert for privacy framework EuroPrise.
Centre de Recherche Publique Henry Tudor
Luxembourg
Moussa Ouedraogo (Ph.D. in security assurance) is a senior researcher in IT security and operational risk management at the Public Research Centre Henri Tudor. His research interest spans the area of events specification and detection, Critical Infrastructure Protection, security assurance and transparency in third party services, including cloud based services. He sits on the editorial board of academic journals such as Wiley Transactions on Emerging Telecommunications Technologies, Scalable Computing, and Practice and Experience as well as has acted as referee for a number of conference and journals including Future generation Computer systems, Software Quality Journal, Journal of Security and Communication Network, and, Journal of Network and Systems Management.
Selex ES
Italy
Antonio Graziano is currently Head of Systems Analysis within the Land and Naval Division of Selex ES (Italy). He holds a Degree cum Laude in Electronic Engineering and has over 25 years of experience in air defence, surveillance, command and control, and homeland protection systems. He has been team leader of several national and international study projects on data fusion and network centric operations. He is author of several journal and conference publications. Since 2005 he has been involved in projects addressing Critical Infrastructure Protection, Systems of Systems modelling, and interdependency analysis.
Published In
Journal of Information Warfare
The definitive publication for the best and latest research and analysis on information warfare, information operations, and cyber crime. Available in traditional hard copy or online.
Quick Links
Archive
