An Experimental Study on the Impact of Network Segmentation to the Resilience of Physical Processes

Abstract : The fact that modern Networked Industrial Control Systems (NICS) depend on Information and Communication Technologies (ICT) is well known. Although many studies have focused on the security of NICS, today we still lack a proper understanding of the impact that network design choices have on the resilience of NICS, e.g., a network architecture using VLAN segmentation. In this paper we investigate the impact of process control network segmentation on the resilience of physical processes. We consider an adversary capable of reprogramming the logic of control hardware in order to disrupt the normal operation of the physical process. Our analysis that is based on the Tennessee-Eastman chemical process proves that network design decisions significantly increase the resilience of the process using as resilience metric the time that the process is able to run after the attack is started, before shutting down. Therefore a resilience-aware network design can provide a tolerance period of several hours that would give operators more time to intervene, e.g., switch OFF devices or disconnect equipment in order to reduce damages.
Type de document :
Communication dans un congrès
Robert Bestak; Lukas Kencl; Li Erran Li; Joerg Widmer; Hao Yin. 11th International Networking Conference (NETWORKING), May 2012, Prague, Czech Republic. Springer, Lecture Notes in Computer Science, LNCS-7289 (Part I), pp.121-134, 2012, NETWORKING 2012. 〈10.1007/978-3-642-30045-5_10〉
Liste complète des métadonnées

Littérature citée [18 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01531118
Contributeur : Hal Ifip <>
Soumis le : jeudi 1 juin 2017 - 11:34:54
Dernière modification le : lundi 22 janvier 2018 - 10:30:18
Document(s) archivé(s) le : mercredi 6 septembre 2017 - 18:50:12

Fichier

978-3-642-30045-5_10_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Béla Genge, Christos Siaterlis. An Experimental Study on the Impact of Network Segmentation to the Resilience of Physical Processes. Robert Bestak; Lukas Kencl; Li Erran Li; Joerg Widmer; Hao Yin. 11th International Networking Conference (NETWORKING), May 2012, Prague, Czech Republic. Springer, Lecture Notes in Computer Science, LNCS-7289 (Part I), pp.121-134, 2012, NETWORKING 2012. 〈10.1007/978-3-642-30045-5_10〉. 〈hal-01531118〉

Partager

Métriques

Consultations de la notice

21

Téléchargements de fichiers

49