过程中的安全性：工业过程数据的可视化支持分类分析
Security in Process: Visually Supported Triage Analysis in Industrial Process Data
摘要：
操作技术网络，即用于监视和控制物理/工业过程的硬件和软件，长期以来一直被认为不受网络攻击的影响。最近这些网络中攻击的增加证明了这一假设是错误的。若干技术限制导致使用可用传感器数据来检测对工业过程的攻击的方法。这种设置从根本上不同于IT网络流量中的异常检测，并且需要适应OT网络数据中的常见周期性行为的新的可视化方法。我们提出了一个量身定制的可视化系统，利用从工业过程的测量的固有功能，以充分的能力，提供对数据的洞察力，并支持外行和专家的分流分析。在交互式系统中实现了螺旋图与异常检测结果的新颖组合。我们的系统的能力证明了使用传感器和执行器的数据，从现实世界的水处理过程中引入的攻击。示例性的分析策略。最后，我们评估我们的系统的有效性和可用性，并进行专家评估。
英文摘要：
Operation technology networks, i.e. hard- and software used for monitoring and controlling physical/industrial processes, have been considered immune to cyber attacks for a long time. A recent increase of attacks in these networks proves this assumption wrong. Several technical constraints lead to approaches to detect attacks on industrial processes using available sensor data. This setting differs fundamentally from anomaly detection in IT-network traffic and requires new visualization approaches adapted to the common periodical behavior in OT-network data. We present a tailored visualization system that utilizes inherent features of measurements from industrial processes to full capacity to provide insight into the data and support triage analysis by laymen and experts. The novel combination of spiral plots with results from anomaly detection was implemented in an interactive system. The capabilities of our system are demonstrated using sensor and actuator data from a real-world water treatment process with introduced attacks. Exemplary analysis strategies are presented. Finally, we evaluate effectiveness and usability of our system and perform an expert evaluation.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
