题名: | Network Forensics Lessons For Industrial Control Systems. |
作者: | Nguyen, T. D. |
关键词: | Theses, Computer network security, Computational forensics, Cyberattacks, Denial of service attack, Network protocols, Cybersecurity, Data analysis |
摘要: | Network security monitoring is an important element in incident response and forensics investigation. Most forensic investigators are trained to recognize abusive network behavior in conventional information systems, but they may not have the technical skills to detect anomalous traffic patterns in industrial control systems that manage critical infrastructure services. We have developed and laboratory-tested hands-on teaching material to introduce students to forensics investigation of intrusions on an industrial network.Rather than using prototypes of ICS components, our approach utilizes commercial industrial products to provide students a more realistic simulation of an ICS network. The lessons cover four different types of attacks and the corresponding post-incident network data analysis. This report describes the initial development of these network forensics lessons. |
报告类型: | 科技报告 |