OSCIDS: An Ontology based SCADA Intrusion Detection Framework
OSCIDS: An Ontology based SCADA Intrusion Detection Framework
A. A. Balushi,K. Mclaughlin,S. Sezer
TLDR
The design, development, and validation of an ontology based SCADA intrusion detection system that can derive additional information based on the background knowledge and ontology models to enhance the intrusion detection data is presented.
Abstract
This paper presents the design, development, and validation of an ontology based SCADA intrusion detection
system. The proposed system analyses SCADA network communications and can derive additional information
based on the background knowledge and ontology models to enhance the intrusion detection data.
The developed intrusion model captures network communications, cyber attacks and the context within the
SCADA domain. Moreover, a set of semantic rules were constructed to detect various attacks and extract logical
relationships among these attacks. The presented framework was extensively evaluated and a comparison
to the state of the art is provided.