A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems
With the development of Web-based services and related technologies, today’s supervisory control and data acquisition is regarded as an Internet of things service system for industrial infrastructures and ensuring open supervisory control and data acquisition systems in a secure and safe state at ru...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Wiley
2016-08-01
|
| Series: | International Journal of Distributed Sensor Networks |
| Online Access: | https://doi.org/10.1177/1550147716664231 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1849304409592299520 |
|---|---|
| author | Yan-Fang Mao Yang Zhang Jun-Liang Chen |
| author_facet | Yan-Fang Mao Yang Zhang Jun-Liang Chen |
| author_sort | Yan-Fang Mao |
| collection | DOAJ |
| description | With the development of Web-based services and related technologies, today’s supervisory control and data acquisition is regarded as an Internet of things service system for industrial infrastructures and ensuring open supervisory control and data acquisition systems in a secure and safe state at runtime becomes a critical and mandatory requirement. Existing host-based monitoring automata are vulnerable because “inside” malware may compromise and subvert the monitoring mechanism itself, and the virtual machine–based monitoring cannot provide observable running traces of the protected services because of the isolation between these services and the runtime monitor. In this article, we propose a non-intrusive solution to guarantee runtime state of open supervisory control and data acquisition systems. In this solution, the running traces of protected services are obtained in an “out-of-box” framework, which is built on abstract execution of network events on Internet of things service models and virtual machine semantic reconstruction of the protected services. In addition, a property checking procedure is employed to check the states of physical devices in advance to guarantee the runtime behavior in compliance with the security policies of open supervisory control and data acquisition systems. In such a way, the solution provides a fine-grained protection for open supervisory control and data acquisition systems and physical devices running in safety. |
| format | Article |
| id | doaj-art-1304add9ace54d43be08bb4082b552eb |
| institution | Kabale University |
| issn | 1550-1477 |
| language | English |
| publishDate | 2016-08-01 |
| publisher | Wiley |
| record_format | Article |
| series | International Journal of Distributed Sensor Networks |
| spelling | doaj-art-1304add9ace54d43be08bb4082b552eb2025-08-20T03:55:44ZengWileyInternational Journal of Distributed Sensor Networks1550-14772016-08-011210.1177/1550147716664231A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systemsYan-Fang Mao0Yang Zhang1Jun-Liang Chen2Software Engineering College, Zhengzhou University of Light Industry, Zhengzhou, ChinaState Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing, ChinaState Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing, ChinaWith the development of Web-based services and related technologies, today’s supervisory control and data acquisition is regarded as an Internet of things service system for industrial infrastructures and ensuring open supervisory control and data acquisition systems in a secure and safe state at runtime becomes a critical and mandatory requirement. Existing host-based monitoring automata are vulnerable because “inside” malware may compromise and subvert the monitoring mechanism itself, and the virtual machine–based monitoring cannot provide observable running traces of the protected services because of the isolation between these services and the runtime monitor. In this article, we propose a non-intrusive solution to guarantee runtime state of open supervisory control and data acquisition systems. In this solution, the running traces of protected services are obtained in an “out-of-box” framework, which is built on abstract execution of network events on Internet of things service models and virtual machine semantic reconstruction of the protected services. In addition, a property checking procedure is employed to check the states of physical devices in advance to guarantee the runtime behavior in compliance with the security policies of open supervisory control and data acquisition systems. In such a way, the solution provides a fine-grained protection for open supervisory control and data acquisition systems and physical devices running in safety.https://doi.org/10.1177/1550147716664231 |
| spellingShingle | Yan-Fang Mao Yang Zhang Jun-Liang Chen A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems International Journal of Distributed Sensor Networks |
| title | A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems |
| title_full | A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems |
| title_fullStr | A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems |
| title_full_unstemmed | A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems |
| title_short | A non-intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems |
| title_sort | non intrusive runtime enforcement on behaviors of open supervisory control and data acquisition systems |
| url | https://doi.org/10.1177/1550147716664231 |
| work_keys_str_mv | AT yanfangmao anonintrusiveruntimeenforcementonbehaviorsofopensupervisorycontrolanddataacquisitionsystems AT yangzhang anonintrusiveruntimeenforcementonbehaviorsofopensupervisorycontrolanddataacquisitionsystems AT junliangchen anonintrusiveruntimeenforcementonbehaviorsofopensupervisorycontrolanddataacquisitionsystems AT yanfangmao nonintrusiveruntimeenforcementonbehaviorsofopensupervisorycontrolanddataacquisitionsystems AT yangzhang nonintrusiveruntimeenforcementonbehaviorsofopensupervisorycontrolanddataacquisitionsystems AT junliangchen nonintrusiveruntimeenforcementonbehaviorsofopensupervisorycontrolanddataacquisitionsystems |