A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system

Shu Hosokawa; Masatoshi Enomoto; Kohei Matsumoto; Makoto Takahashi

doi:10.1109/ASCC.2015.7244767

A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system

Shu Hosokawa, Masatoshi Enomoto, Kohei Matsumoto, Makoto Takahashi

ENG - Management Science and Technology

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Citation (Scopus)

Abstract

When abnormalities, including equipment failure and/or cyberattacks, occur in the control system of a production site, it is essential to specify their cause to ensure rapid restoration of the productive equipment. However, it is difficult for control engineers to quickly determine whether the cause is a cyberattack, malware infection, or failure resulting from the state information captured by the plant, because they do not always understand cybersecurity and tend to think about failure diagnosis first. Motivated by this, this paper proposes an information provision system to separate cyberattack information from abnormality information for cyberattack early recognition support. A prototype of an early recognition support system was developed and its validity demonstrated via a simulated plant.

Original language	English
Title of host publication	2015 10th Asian Control Conference
Subtitle of host publication	Emerging Control Techniques for a Sustainable World, ASCC 2015
Editors	Hazlina Selamat, Hafiz Rashidi Haruna Ramli, Ahmad Athif Mohd Faudzi, Ribhan Zafira Abdul Rahman, Asnor Juraiza Ishak, Azura Che Soh, Siti Anom Ahmad
Publisher	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)	9781479978625
DOIs	https://doi.org/10.1109/ASCC.2015.7244767
Publication status	Published - 2015 Sept 8
Event	10th Asian Control Conference, ASCC 2015 - Kota Kinabalu, Malaysia Duration: 2015 May 31 → 2015 Jun 3

Publication series

Name	2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015

Conference

Conference	10th Asian Control Conference, ASCC 2015
Country/Territory	Malaysia
City	Kota Kinabalu
Period	15/5/31 → 15/6/3

Access to Document

10.1109/ASCC.2015.7244767

Cite this

Hosokawa, S., Enomoto, M., Matsumoto, K., & Takahashi, M. (2015). A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system. In H. Selamat, H. R. H. Ramli, A. A. M. Faudzi, R. Z. A. Rahman, A. J. Ishak, A. C. Soh, & S. A. Ahmad (Eds.), 2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015 Article 7244767 (2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ASCC.2015.7244767

Hosokawa, Shu ; Enomoto, Masatoshi ; Matsumoto, Kohei et al. / A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system. 2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015. editor / Hazlina Selamat ; Hafiz Rashidi Haruna Ramli ; Ahmad Athif Mohd Faudzi ; Ribhan Zafira Abdul Rahman ; Asnor Juraiza Ishak ; Azura Che Soh ; Siti Anom Ahmad. Institute of Electrical and Electronics Engineers Inc., 2015. (2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015).

@inproceedings{3523ed763d644a64a5880689d0cf820a,

title = "A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system",

abstract = "When abnormalities, including equipment failure and/or cyberattacks, occur in the control system of a production site, it is essential to specify their cause to ensure rapid restoration of the productive equipment. However, it is difficult for control engineers to quickly determine whether the cause is a cyberattack, malware infection, or failure resulting from the state information captured by the plant, because they do not always understand cybersecurity and tend to think about failure diagnosis first. Motivated by this, this paper proposes an information provision system to separate cyberattack information from abnormality information for cyberattack early recognition support. A prototype of an early recognition support system was developed and its validity demonstrated via a simulated plant.",

author = "Shu Hosokawa and Masatoshi Enomoto and Kohei Matsumoto and Makoto Takahashi",

note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; 10th Asian Control Conference, ASCC 2015 ; Conference date: 31-05-2015 Through 03-06-2015",

year = "2015",

month = sep,

day = "8",

doi = "10.1109/ASCC.2015.7244767",

language = "English",

series = "2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

editor = "Hazlina Selamat and Ramli, {Hafiz Rashidi Haruna} and Faudzi, {Ahmad Athif Mohd} and Rahman, {Ribhan Zafira Abdul} and Ishak, {Asnor Juraiza} and Soh, {Azura Che} and Ahmad, {Siti Anom}",

booktitle = "2015 10th Asian Control Conference",

address = "United States",

}

Hosokawa, S, Enomoto, M, Matsumoto, K & Takahashi, M 2015, A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system. in H Selamat, HRH Ramli, AAM Faudzi, RZA Rahman, AJ Ishak, AC Soh & SA Ahmad (eds), 2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015., 7244767, 2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015, Institute of Electrical and Electronics Engineers Inc., 10th Asian Control Conference, ASCC 2015, Kota Kinabalu, Malaysia, 15/5/31. https://doi.org/10.1109/ASCC.2015.7244767

A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system. / Hosokawa, Shu; Enomoto, Masatoshi; Matsumoto, Kohei et al.
2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015. ed. / Hazlina Selamat; Hafiz Rashidi Haruna Ramli; Ahmad Athif Mohd Faudzi; Ribhan Zafira Abdul Rahman; Asnor Juraiza Ishak; Azura Che Soh; Siti Anom Ahmad. Institute of Electrical and Electronics Engineers Inc., 2015. 7244767 (2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system

AU - Hosokawa, Shu

AU - Enomoto, Masatoshi

AU - Matsumoto, Kohei

AU - Takahashi, Makoto

PY - 2015/9/8

Y1 - 2015/9/8

N2 - When abnormalities, including equipment failure and/or cyberattacks, occur in the control system of a production site, it is essential to specify their cause to ensure rapid restoration of the productive equipment. However, it is difficult for control engineers to quickly determine whether the cause is a cyberattack, malware infection, or failure resulting from the state information captured by the plant, because they do not always understand cybersecurity and tend to think about failure diagnosis first. Motivated by this, this paper proposes an information provision system to separate cyberattack information from abnormality information for cyberattack early recognition support. A prototype of an early recognition support system was developed and its validity demonstrated via a simulated plant.

AB - When abnormalities, including equipment failure and/or cyberattacks, occur in the control system of a production site, it is essential to specify their cause to ensure rapid restoration of the productive equipment. However, it is difficult for control engineers to quickly determine whether the cause is a cyberattack, malware infection, or failure resulting from the state information captured by the plant, because they do not always understand cybersecurity and tend to think about failure diagnosis first. Motivated by this, this paper proposes an information provision system to separate cyberattack information from abnormality information for cyberattack early recognition support. A prototype of an early recognition support system was developed and its validity demonstrated via a simulated plant.

UR - http://www.scopus.com/inward/record.url?scp=84957669372&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84957669372&partnerID=8YFLogxK

U2 - 10.1109/ASCC.2015.7244767

DO - 10.1109/ASCC.2015.7244767

M3 - Conference contribution

AN - SCOPUS:84957669372

T3 - 2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015

BT - 2015 10th Asian Control Conference

A2 - Selamat, Hazlina

A2 - Ramli, Hafiz Rashidi Haruna

A2 - Faudzi, Ahmad Athif Mohd

A2 - Rahman, Ribhan Zafira Abdul

A2 - Ishak, Asnor Juraiza

A2 - Soh, Azura Che

A2 - Ahmad, Siti Anom

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 10th Asian Control Conference, ASCC 2015

Y2 - 31 May 2015 through 3 June 2015

ER -

Hosokawa S, Enomoto M, Matsumoto K, Takahashi M. A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system. In Selamat H, Ramli HRH, Faudzi AAM, Rahman RZA, Ishak AJ, Soh AC, Ahmad SA, editors, 2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015. Institute of Electrical and Electronics Engineers Inc. 2015. 7244767. (2015 10th Asian Control Conference: Emerging Control Techniques for a Sustainable World, ASCC 2015). doi: 10.1109/ASCC.2015.7244767

A prototype of cyber incident diagnosis mechanism for cyber attacks early recognition support system

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this