Showing 1–1 of 1 results for author: Sgaglione, L

Critical Infrastructure Protection: having SIEM technology cope with network heterogeneity

Authors: Gianfranco Cerullo, Valerio Formicola, Pietro Iamiglio, Luigi Sgaglione

Abstract: Coordinated and targeted cyber-attacks to Critical Infrastructures (CIs) are becoming more and more frequent and sophisticated. This is due to: i) the recent technology shift towards Commercial Off-The-Shelf (COTS) products, and ii) new economical and socio-political motivations. In this paper, we discuss some of the most relevant security issues resulting from the adoption in CIs of heterogeneous… ▽ More Coordinated and targeted cyber-attacks to Critical Infrastructures (CIs) are becoming more and more frequent and sophisticated. This is due to: i) the recent technology shift towards Commercial Off-The-Shelf (COTS) products, and ii) new economical and socio-political motivations. In this paper, we discuss some of the most relevant security issues resulting from the adoption in CIs of heterogeneous network infrastructures (specifically combining wireless and IP trunks), and suggest techniques to detect, as well as to counter/mitigate attacks. We claim that techniques such as those we propose here should be integrated in future SIEM (Security Information and Event Management) solutions, and we discuss how we have done so in the EC-funded MASSIF project, with respect to a real-world CI scenario, specifically a distributed system for power grid monitoring. △ Less

Submitted 29 April, 2014; originally announced April 2014.

Comments: EDCC-2014, BIG4CIP-2014, Critical Infrastructure Protection, Intrusion Detection and Diagnosis, Complex Event Processing , Security Information and Event Management (SIEM)