增强SCADA安全：开发基于主机的入侵检测系统以防范网络攻击
Enhancing SCADA Security: Developing a Host-Based Intrusion Detection System to Safeguard Against Cyberattacks
AI总结：
针对智能电网SCADA系统缺乏专用主机入侵检测的问题，本文提出利用USB设备识别、标记和进程内存扫描的检测系统，并在三种场景下验证了其检测和禁用恶意软件的有效性。
摘要：
随着智能电网日益依赖正常运行的SCADA系统，且这些系统容易遭受网络攻击，迫切需要有效的安全措施。SCADA系统易受网络攻击，对关键基础设施构成风险。由于缺乏专门针对SCADA系统稳定特性设计的基于主机的入侵检测系统，本工作的目标是提出一种为智能电网中的SCADA系统量身定制的基于主机的入侵检测系统。所提出的系统利用USB设备识别、标记和进程内存扫描来监控和检测SCADA系统中的异常，从而提供增强的安全措施。在三种不同场景下的评估证明了该工具在检测和禁用恶意软件方面的有效性。所提出的方法能够有效识别潜在威胁，并增强智能电网中SCADA系统的安全性，为防范网络攻击提供了一种有前景的解决方案。
英文摘要：
With the increasing reliance of smart grids on correctly functioning SCADA systems and their vulnerability to cyberattacks, there is a pressing need for effective security measures. SCADA systems are prone to cyberattacks, posing risks to critical infrastructure. As there is a lack of host-based intrusion detection systems specifically designed for the stable nature of SCADA systems, the objective of this work is to propose a host-based intrusion detection system tailored for SCADA systems in smart grids. The proposed system utilizes USB device identification, flagging, and process memory scanning to monitor and detect anomalies in SCADA systems, providing enhanced security measures. Evaluation in three different scenarios demonstrates the tool's effectiveness in detecting and disabling malware. The proposed approach effectively identifies potential threats and enhances the security of SCADA systems in smart grids, providing a promising solution to protect against cyberattacks.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
