Cyber Stealth Attacks in Critical Information Infrastructures
Cyber Stealth Attacks in Critical Information Infrastructures
复制标题
DOI：
10.1109/jsyst.2015.2487684
复制
发表时间：
2018-06
影响因子：
4.4
通讯作者：
L. Cazorla;Cristina Alcaraz;Javier López
中科院分区：
文献类型：
--
作者：
L. Cazorla;Cristina Alcaraz;Javier López
当前的关键基础设施（CI）是复杂的互联工业系统，近年来，这些系统已经整合了信息和通信技术，例如连接到互联网和商业现成组件。这使得它们更容易操作和维护，但也使它们面临淹没传统网络和系统的威胁和攻击。本文对威胁CI的主要隐形攻击进行了全面的研究，特别关注关键信息基础设施。这种类型的攻击的特点是对手能够微调他的行动，以避免检测，同时努力实现他的目标。为了提供一个完整的分析的范围和潜在的危险的隐形攻击，我们确定和分析他们的阶段和范围，我们设计了一个分类来说明威胁CI，提供了一个概述适用的对策，对这些攻击。从我们的分析中，我们了解到，由于CI的相互依赖性，这些类型的攻击对关键系统构成了严重威胁，这些威胁很容易级联到互连系统。
Current critical infrastructures (CIs) are complex interconnected industrial systems that, in recent years, have incorporated information and communications technologies such as connection to the Internet and commercial off-the-shelf components. This makes them easier to operate and maintain but exposes them to the threats and attacks that inundate conventional networks and systems. This paper contains a comprehensive study on the main stealth attacks that threaten CIs, with a special focus on critical information infrastructures. This type of attack is characterized by an adversary who is able to finely tune his actions to avoid detection while working toward his objectives. To provide a complete analysis of the scope and potential dangers of stealth attacks, we determine and analyze their stages and range, and we design a taxonomy to illustrate the threats to CIs, offering an overview of the applicable countermeasures against these attacks. From our analysis, we understand that these types of attacks, due to the interdependent nature of CIs, pose a grave danger to critical systems where the threats can easily cascade down to the interconnected systems.