Development of a Network Intrusion Detection Demonstrator for Industrial Control Systems

Description

Industrial control systems are used in vital areas such as energy supply and production. The security of industrial control systems is an ever-emerging issue. Various attacks on such control centers have already caused huge damage. Early detection is the first step to do something against an attack. Intrusion Detection Systems are used to detect suspicious network traffic or activities. We would like to apply this technology in the area of industrial control systems to demonstrate its usefulness. For this purpose, we extend a virtual control system testbed with additional attack methods. Several common attack detection tools will be compared and finally Snort will be used to detect the implemented attacks. This demonstration can be used to enable attack detection in critical systems. In addition, attack detection techniques themselves can also be further improved.