Big Data in Critical Infrastructures Security Monitoring: Challenges and Opportunities

摘要

Critical Infrastructures (CIs), such as smart power grids, transport systems,and financial infrastructures, are more and more vulnerable to cyber threats,due to the adoption of commodity computing facilities. Despite the use ofseveral monitoring tools, recent attacks have proven that current defensivemechanisms for CIs are not effective enough against most advanced threats. Inthis paper we explore the idea of a framework leveraging multiple data sourcesto improve protection capabilities of CIs. Challenges and opportunities arediscussed along three main research directions: i) use of distinct andheterogeneous data sources, ii) monitoring with adaptive granularity, and iii)attack modeling and runtime combination of multiple data analysis techniques.