Intrusion Detection Method Using Enhanced Whitelist Based on Cooperation of System Development, System Deployment, and Device Development Domains in CPS

Abstract

Cyber-physical systems (CPS), as fusions of virtual and real worlds, have attracted attention in recent years. CPS realize rationalization and optimization in various domains, by collecting real-world data in the virtual world, analyzing the information, then reacting to the real world. Moreover, attacks on CPS can cause direct damage in the real world. Therefore, with the NIST CPS framework in mind, this paper discusses an approach to designing countermeasures to risks, considering the interactions with a system. Applying the approach of intrusion detection for control systems, this paper also proposes an intrusion detection method using an enhanced whitelist.