Visible to the public A Dynamic Cybersecurity Protection Method based on Software-defined Networking for Industrial Control Systems

TitleA Dynamic Cybersecurity Protection Method based on Software-defined Networking for Industrial Control Systems
Publication TypeConference Paper
Year of Publication2019
AuthorsWang, Fang, Qi, Weimin, Qian, Tonghui
Conference Name2019 Chinese Automation Congress (CAC)
Keywordsclosed-loop security control, composability, computer security, control engineering computing, control systems, cybersecurity protection, dynamic cybersecurity protection method, ICs, industrial control, industrial control system, industrial control systems, Intrusion detection, IP networks, moving target defense, Networked Control Systems Security, Predictive Metrics, protection requirement analysis, pubcrawl, Real-time intrusion detection, Real-time Systems, Resiliency, SDN, security of data, security response measures, Software Defined Network, software defined networking, software-defined networking
AbstractIn this paper, a dynamic cybersecurity protection method based on software-defined networking (SDN) is proposed, according to the protection requirement analysis for industrial control systems (ICSs). This method can execute security response measures by SDN, such as isolation, redirection etc., based on the real-time intrusion detection results, forming a detecting-responding closed-loop security control. In addition, moving target defense (MTD) concept is introduced to the protection for ICSs, where topology transformation and IP/port hopping are realized by SDN, which can confuse and deceive the attackers and prevent attacks at the beginning, protection ICSs in an active manner. The simulation results verify the feasibility of the proposed method.
DOI10.1109/CAC48633.2019.8996244
Citation Keywang_dynamic_2019