Identifying Industry Devices via Time Delay in Dataflow

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26220%2F23%3APU150132" target="_blank" >RIV/00216305:26220/23:PU150132 - isvavai.cz</a>

Result on the web

<a href="http://dx.doi.org/10.1145/3638782.3638808" target="_blank" >http://dx.doi.org/10.1145/3638782.3638808</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.1145/3638782.3638808" target="_blank" >10.1145/3638782.3638808</a>

Result language

angličtina

Original language name

Identifying Industry Devices via Time Delay in Dataflow

Original language description

In networks with critical industrial processes where operational integrity is paramount, device identification is crucial for security and effective management. Without such identification, the potential for mismanagement and security breaches increases. Active scanning for network device identification poses risks, especially in industrial settings. Such scanning can disrupt operations or even cause damage. Therefore, finding non-invasive identification methods that bypass active scanning is imperative. Passive scanning, owing to its non-intrusive approach, is favored for industrial devices. Modern statistical learning techniques combined with passive scanning can mitigate risks of active methods. Our research harnesses time delay data in network communications to accurately identify specific industrial PLC models. We derive our data from timestamp details of the OPC UA protocol, widely recognized as a standard in industrial communication. Statistical variables from time delay data enhance the accuracy of passive device identification in industrial settings.

Czech name

—

Czech description

—

Type

D - Article in proceedings

CEP classification

—

OECD FORD branch

20203 - Telecommunications

Project

<a href="/en/project/VK01030109" target="_blank" >VK01030109: Research on Holistic Model of Interconnected Critical Electricity and Communication Infrastructures</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2023

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection

ICCNS 2023 Proceedings

ISBN

979-8-4007-0796-4

ISSN

—

e-ISSN

—

Number of pages

5

Pages from-to

1-5

Publisher name

Neuveden

Place of publication

neuveden

Event location

Fuzhou, China

Event date

Dec 1, 2023

Type of event by nationality

WRD - Celosvětová akce

UT code for WoS article

—