상세정보
학술대회
Abnormal Traffic Detection Mechanism for Protecting IIoT Environments
- 발행일
- 201810
- 출처
- International Conference on Information and Communication Technology Convergence (ICTC) 2018, pp.943-945
- 협약과제
- 18HH4700, (총괄+1세부) IoT 디바이스 자율 신뢰보장 기술 및 글로벌 표준기반 IoT 통합보안 오픈 플랫폼 기술개발, 최두호
- 초록
- In the last few decades, control systems have been upgraded from the standard serial bus systems to modern TCP/IP based systems. The Modbus protocol is one of the most widely used protocols in control systems. However, it provides no inherent security mechanisms. Therefore, the Modbus protocol is susceptible to the type of attack that injects false Modbus commands. For that reason, we propose an abnormal traffic detection mechanism by tracing Modbus/TCP transactions. The proposed method enables immediate and fast response to not only Denial-of-Service (DoS) attacks, which can be induced by a repetition of false Modbus commands, but also various types of accidents, which can be occurred inadvertently from things such as routing loops, misconfigured devices and human mistakes.
- KSP 제안 키워드
- Abnormal traffic, Bus system, Control systems, Denial-of-service (DoS) attacks, MODBUS protocol, Routing loops, Traffic detection, based system, detection mechanism, fast response, security mechanism