Investigating the Applicability of a Moving Target Defense for SCADA Systems

As computer attacks become more sophisticated and the rise of advanced persistent threats, moving target defense (MTD) is a new strategy being developed to reduce attacker success and provide for system resiliency. This work has been focused on standard IT infrastructures. In this paper we put forward how current MTD techniques may be applicable to the SCADA environment.

Content

Author and article information

Contributors

Cordell C. Davidson

Joel Dawson

Paul Carsten

Mark Yampolskiy

Todd R. Andel

Conference

Publication date: September 2015

Publication date (Print): September 2015

Pages: 107-110

Affiliations

[0001]University of South Alabama

Article

DOI: 10.14236/ewic/ICS2015.14

SO-VID: d9c92c2c-e47c-4201-b128-7d0ccaeacb73

License:

This work is licensed under a Creative Commons Attribution 4.0 Unported License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/

Conference name: 3rd International Symposium for ICS & SCADA Cyber Security Research 2015 (ICS-CSR 2015)

Conference acronym: ICS-CSR

Conference number: 3

Conference location: Germany

Conference date: 17 - 18 September 2015

Conference sponsor: Electronic Workshops in Computing (eWiC)

Conference theme: Industrial Control System & SCADA Cyber Security Research (ICS-CSR)

History

Product

1477-9358 BCS Learning & Development

Self URI (article page): https://www.scienceopen.com/hosted-document?doi=10.14236/ewic/ICS2015.14

Self URI (journal page): https://ewic.bcs.org/

References

T. R AndelL. N WhitehurstJ. T McDonald 2014 Software security and randomization through program partitioning and circuit variation Proceedings of the 1st ACM Workshop on Moving Target Defense ACM
E Barrantes 2003 Randomized instruction set emulation to disrupt binary code injection attacks Proceedings of the 10th ACM Conference on Computer and Communications Security ACM
C CadarP AkritidisM CostaJ MartinM Castro 2008 Data randomization MS Research. Available from http://research. microsoft.com/apps/pubs/default.aspx?id=70626 Sep 23 2014
M DunlopS GroatW UrbanskiR MarchanyJ Tront 2011 MT6D: A moving target IPv6 defense IEEE Military Communications Conference (MILCOM 2011 1321 1326
EOP NSTC 2011 Trustworthy cyberspace: strategic plan for the federal cybersecurity research and development program Available from http://www.whitehouse.gov/sites/default/ files/microsites/ostp/fed_cybersecurity_rd_strate gic_plan_2011.pdf March 19 2015
D JohnR SmithW TurkettD Canas, and E Fulp 2014 Evolutionary based moving target cyber defense Proceedings of the 2014 Conference Companion on Genetic and Evolutionary Computation Companion ACM 1261 1268
R. L Krutz 2005 Securing SCADA Systems New York Wiley Publishing
H ShachamM PageB PfaffE GohN ModaduguD Boneh 2004 On the effectiveness of address-space randomization Proceedings of the 11th ACM Conference on Computer and Comm Security ACM 298 307
M Yampolskiy 2015 A language for describing attacks on cyber-physical systems Int. J. Critical Infrastruct. Protection 8 40 52

Comments

Comment on this article

[1] T. R AndelL. N WhitehurstJ. T McDonald 2014 Software security and randomization through program partitioning and circuit variation Proceedings of the 1st ACM Workshop on Moving Target Defense ACM

[2] E Barrantes 2003 Randomized instruction set emulation to disrupt binary code injection attacks Proceedings of the 10th ACM Conference on Computer and Communications Security ACM

[3] C CadarP AkritidisM CostaJ MartinM Castro 2008 Data randomization MS Research. Available from http://research. microsoft.com/apps/pubs/default.aspx?id=70626 Sep 23 2014

[4] M DunlopS GroatW UrbanskiR MarchanyJ Tront 2011 MT6D: A moving target IPv6 defense IEEE Military Communications Conference (MILCOM 2011 1321 1326

[5] EOP NSTC 2011 Trustworthy cyberspace: strategic plan for the federal cybersecurity research and development program Available from http://www.whitehouse.gov/sites/default/ files/microsites/ostp/fed_cybersecurity_rd_strate gic_plan_2011.pdf March 19 2015

[6] D JohnR SmithW TurkettD Canas, and E Fulp 2014 Evolutionary based moving target cyber defense Proceedings of the 2014 Conference Companion on Genetic and Evolutionary Computation Companion ACM 1261 1268

[7] R. L Krutz 2005 Securing SCADA Systems New York Wiley Publishing

[8] H ShachamM PageB PfaffE GohN ModaduguD Boneh 2004 On the effectiveness of address-space randomization Proceedings of the 11th ACM Conference on Computer and Comm Security ACM 298 307

[9] M Yampolskiy 2015 A language for describing attacks on cyber-physical systems Int. J. Critical Infrastruct. Protection 8 40 52

Celebrating 65 years of The Computer Journal - free-to-read perspectives - bcs.org/tcj65