Leveraging Software-Defined Networking for Incident Response in Industrial Control Systems

How software-defined networks and network function virtualization can facilitate automatic incident response to a variety of attacks against industrial networks is shown and a prototype of an incident-response solution that detects and responds automatically to sensor attacks and controller attacks is presented.