AU2018222991B2 - Method and system for detecting attacks on cyber-physical systems using redundant devices and smart contracts - Google Patents

Method and system for detecting attacks on cyber-physical systems using redundant devices and smart contracts Download PDF

Info

Publication number
AU2018222991B2
AU2018222991B2 AU2018222991A AU2018222991A AU2018222991B2 AU 2018222991 B2 AU2018222991 B2 AU 2018222991B2 AU 2018222991 A AU2018222991 A AU 2018222991A AU 2018222991 A AU2018222991 A AU 2018222991A AU 2018222991 B2 AU2018222991 B2 AU 2018222991B2
Authority
AU
Australia
Prior art keywords
reading
entities
sensors
entity
network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
AU2018222991A
Other languages
English (en)
Other versions
AU2018222991A1 (en
Inventor
Shantanu Rane
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Palo Alto Research Center Inc
Original Assignee
Palo Alto Research Center Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Palo Alto Research Center Inc filed Critical Palo Alto Research Center Inc
Publication of AU2018222991A1 publication Critical patent/AU2018222991A1/en
Application granted granted Critical
Publication of AU2018222991B2 publication Critical patent/AU2018222991B2/en
Ceased legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/18—Network architectures or network communication protocols for network security using different networks or channels, e.g. using out of band channels
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
    • Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
    • Y04S40/00—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
    • Y04S40/20—Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
AU2018222991A 2017-09-19 2018-08-30 Method and system for detecting attacks on cyber-physical systems using redundant devices and smart contracts Ceased AU2018222991B2 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US15/709,259 US10831890B2 (en) 2017-09-19 2017-09-19 Method and system for detecting attacks on cyber-physical systems using redundant devices and smart contracts
US15/709,259 2017-09-19

Publications (2)

Publication Number Publication Date
AU2018222991A1 AU2018222991A1 (en) 2019-04-04
AU2018222991B2 true AU2018222991B2 (en) 2023-04-20

Family

ID=63787707

Family Applications (1)

Application Number Title Priority Date Filing Date
AU2018222991A Ceased AU2018222991B2 (en) 2017-09-19 2018-08-30 Method and system for detecting attacks on cyber-physical systems using redundant devices and smart contracts

Country Status (4)

Country Link
US (1) US10831890B2 (https=)
EP (1) EP3457659B1 (https=)
JP (1) JP7026028B2 (https=)
AU (1) AU2018222991B2 (https=)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11943236B2 (en) * 2018-04-26 2024-03-26 Hitachi Energy Ltd Technologies for detecting cyber-attacks against electrical distribution devices
US10204236B1 (en) * 2018-05-30 2019-02-12 Drfirst.Com, Inc. Self-consistent structures for secure transmission and temporary storage of sensitive data
EP3611587A1 (de) * 2018-08-16 2020-02-19 Siemens Aktiengesellschaft System zur steuerung und überwachung von adaptiven cyber-physikalischen systemen
EP3726407A1 (en) * 2019-04-15 2020-10-21 Siemens Aktiengesellschaft Validation of measurement data sets using oracle consensus
US11126425B2 (en) * 2019-04-19 2021-09-21 Sarcos Corp. Version history management using a blockchain
EP3742304B1 (en) * 2019-05-22 2024-10-02 Siemens Aktiengesellschaft Validation of measurement datasets in a distributed database
JP7297200B2 (ja) * 2019-06-17 2023-06-26 株式会社野村総合研究所 ブロックチェーンを利用するシステム
WO2020261359A1 (ja) * 2019-06-25 2020-12-30 日本電気株式会社 電子取引システム、取引管理サーバ、電子取引方法及びプログラム
CN112070180B (zh) * 2020-09-30 2024-01-19 南方电网科学研究院有限责任公司 基于信息物理双侧数据的电网设备状态判断方法及装置
US12513164B2 (en) * 2023-07-12 2025-12-30 Wells Fargo Bank, N.A. Data devaluation through smart contracts

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0931284A1 (en) * 1996-10-04 1999-07-28 Fisher Controls International, Inc. Process control network with redundant field devices and busses

Family Cites Families (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6047222A (en) * 1996-10-04 2000-04-04 Fisher Controls International, Inc. Process control network with redundant field devices and buses
US9027121B2 (en) * 2000-10-10 2015-05-05 International Business Machines Corporation Method and system for creating a record for one or more computer security incidents
US8528086B1 (en) * 2004-04-01 2013-09-03 Fireeye, Inc. System and method of detecting computer worms
US8850565B2 (en) * 2005-01-10 2014-09-30 Hewlett-Packard Development Company, L.P. System and method for coordinating network incident response activities
US7930256B2 (en) * 2006-05-23 2011-04-19 Charles River Analytics, Inc. Security system for and method of detecting and responding to cyber attacks on large network systems
EP2279465B1 (en) * 2008-04-17 2014-04-02 Siemens Aktiengesellschaft Method and system for cyber security management of industrial control systems
US9494933B1 (en) * 2009-06-19 2016-11-15 The Boeing Company Processing packets in an aircraft network data processing system
TW201225582A (en) * 2010-12-02 2012-06-16 Inst Information Industry Common server, adaptor, and data conforming method thereof
US8839349B2 (en) * 2011-10-18 2014-09-16 Mcafee, Inc. Integrating security policy and event management
US10291619B2 (en) * 2012-04-06 2019-05-14 Wayne Odom System, method, and device for delivering communications and storing and delivering data
US9910969B2 (en) * 2012-04-06 2018-03-06 Wayne Odom System, method, and device for delivering communications and storing and delivering data
US9405900B2 (en) 2013-03-13 2016-08-02 General Electric Company Intelligent cyberphysical intrusion detection and prevention systems and methods for industrial control systems
US9367683B2 (en) 2013-03-15 2016-06-14 Cyberricade, Inc. Cyber security
HK1223709A1 (zh) * 2013-06-18 2017-08-04 Level 3 Communications, Llc 网络中的数据中心冗余
US8752178B2 (en) * 2013-07-31 2014-06-10 Splunk Inc. Blacklisting and whitelisting of security-related events
WO2015051181A1 (en) * 2013-10-03 2015-04-09 Csg Cyber Solutions, Inc. Dynamic adaptive defense for cyber-security threats
US9756062B2 (en) * 2014-08-27 2017-09-05 General Electric Company Collaborative infrastructure supporting cyber-security analytics in industrial networks
US10592668B2 (en) * 2014-11-26 2020-03-17 Howard University Computer system security with redundant diverse secondary control system with incompatible primary control system
WO2016118979A2 (en) * 2015-01-23 2016-07-28 C3, Inc. Systems, methods, and devices for an enterprise internet-of-things application development platform
JP2018516026A (ja) * 2015-03-20 2018-06-14 リヴェッツ・コーポレーションＲｉｖｅｔｚ Ｃｏｒｐ． ブロックチェーンを使用したデバイス整合性の自動認証
US10404748B2 (en) * 2015-03-31 2019-09-03 Guidewire Software, Inc. Cyber risk analysis and remediation using network monitored sensors and methods of use
US20170046689A1 (en) 2015-07-14 2017-02-16 Fmr Llc Crypto Voting and Social Aggregating, Fractionally Efficient Transfer Guidance, Conditional Triggered Transaction, Datastructures, Apparatuses, Methods and Systems
US10402792B2 (en) * 2015-08-13 2019-09-03 The Toronto-Dominion Bank Systems and method for tracking enterprise events using hybrid public-private blockchain ledgers
US10643288B2 (en) * 2015-10-13 2020-05-05 TransActive Grid Inc. Use of blockchain based distributed consensus control
US9894036B2 (en) * 2015-11-17 2018-02-13 Cyber Adapt, Inc. Cyber threat attenuation using multi-source threat data analysis
US10063572B2 (en) * 2016-03-28 2018-08-28 Accenture Global Solutions Limited Antivirus signature distribution with distributed ledger
US10372910B2 (en) * 2016-06-20 2019-08-06 Jask Labs Inc. Method for predicting and characterizing cyber attacks
US11176519B2 (en) * 2016-11-11 2021-11-16 International Business Machines Corporation Smart contract admission check and fault tolerance in a blockchain
US20180285996A1 (en) * 2017-04-03 2018-10-04 FutureLab Consulting Inc. Methods and system for managing intellectual property using a blockchain
US11924322B2 (en) * 2017-05-16 2024-03-05 Arm Ltd. Blockchain for securing and/or managing IoT network-type infrastructure
US10846664B2 (en) * 2017-05-26 2020-11-24 Aim Ip, Llc Secure electronic system for managing digital currencies
US10581873B2 (en) * 2017-07-11 2020-03-03 Cisco Technology, Inc. Securing micro-services
US10505955B2 (en) * 2017-08-22 2019-12-10 General Electric Company Using virtual sensors to accommodate industrial asset control systems during cyber attacks
US10686799B2 (en) * 2018-04-30 2020-06-16 EMC IP Holding Company LLC Blockchain-based method and system for providing tenant security and compliance in a cloud computing environment
US10542046B2 (en) * 2018-06-07 2020-01-21 Unifyvault LLC Systems and methods for blockchain security data intelligence
US11386375B2 (en) * 2018-09-20 2022-07-12 Software Ag Systems and/or methods for securing and automating process management systems using distributed sensors and distributed ledger of digital transactions
US10979452B2 (en) * 2018-09-21 2021-04-13 International Business Machines Corporation Blockchain-based malware containment in a network resource
US11405182B2 (en) * 2018-12-03 2022-08-02 Ebay Inc. Adaptive security for smart contracts using high granularity metrics

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0931284A1 (en) * 1996-10-04 1999-07-28 Fisher Controls International, Inc. Process control network with redundant field devices and busses

Also Published As

Publication number Publication date
US10831890B2 (en) 2020-11-10
JP7026028B2 (ja) 2022-02-25
EP3457659B1 (en) 2022-05-11
US20190087571A1 (en) 2019-03-21
JP2019057276A (ja) 2019-04-11
EP3457659A1 (en) 2019-03-20
AU2018222991A1 (en) 2019-04-04

Similar Documents

Publication Publication Date Title
AU2018222991B2 (en) Method and system for detecting attacks on cyber-physical systems using redundant devices and smart contracts
US11748336B2 (en) Method and apparatus for managing measurement device based on blockchain
US10057072B2 (en) Industrial network certificate recovery by identifying secondary root certificate
CN114981771B (zh) 可从网络攻击和故障恢复的存储器设备
US20210160273A1 (en) Method for calculating risk for industrial control system and apparatus using the same
CN110334515B (zh) 一种基于可信计算平台生成度量报告的方法及装置
CN107622390B (zh) 用于没有电池的安全支付终端的系统及方法
EP3848862A1 (en) Method and apparatus for managing information about measurement device
JP2017111532A (ja) 制御装置及び統合生産システム
CN106133743A (zh) 用于优化预安装应用程序的扫描的系统和方法
EP3935541B1 (en) Validation of measurement data sets using oracle consensus
CN102497647B (zh) 一种物联网监测系统的完整性验证评估方法
WO2017105706A1 (en) Processor state integrity protection using hash verification
CN116032553B (zh) 虚假数据注入攻击检测方法、检测终端及存储介质
Ali et al. ICS/SCADA system security for CPS
CN119885148B (zh) 安全校验方法、系统、服务器、介质及计算机程序产品
CN104331666A (zh) 一种计算机系统可信度量方法
US11531785B2 (en) PUF-based data integrity
CN117744157A (zh) 基于信息混淆脱敏的智能合约管理方法及系统
US20150340111A1 (en) Device for detecting unauthorized manipulations of the system state of an open-loop and closed-loop control unit and a nuclear plant having the device
EP3879783A1 (en) Data security processing method and terminal thereof, and server
CN106888210A (zh) 一种网络攻击的警示方法及装置
WO2021086303A1 (en) Authorising component updates
JP5955165B2 (ja) 管理装置、管理方法及び管理プログラム
WO2017099062A1 (ja) 診断装置、診断方法、及び、診断プログラムが記録された記録媒体

Legal Events

Date Code Title Description
FGA Letters patent sealed or granted (standard patent)
MK14 Patent ceased section 143(a) (annual fees not paid) or expired