DISTRIBUTED INTRUSION DETECTION SYSTEM FOR SCADA PROTOCOLS

摘要

This paper presents an innovative, distributed, multilayer approach for detecting known and unknown attacks on industrial control systems. The approach employs process event correlation, critical state detection and critical state aggregation. The paper also describes a prototype implementation and provides experimental results that validate the intrusion detection approach.