A4 Article in conference proceedings
Validation of Sensor Data Integrity in OT Environments Through Multisource Data Sensors (2024)
Simola, J., Takala, A., Lehkonen, R., Frantti, T., & Savola, R. (2024). Validation of Sensor Data Integrity in OT Environments Through Multisource Data Sensors. In M. Lehto (Ed.), Proceedings of the 23rd European Conference on Cyber Warfare and Security (23, pp. 487-495). Academic Conferences International Ltd. Proceedings of the European Conference on Cyber Warfare and Security. https://doi.org/10.34190/eccws.23.1.2335
JYU authors or editors
Publication details
All authors or editors: Simola, Jussi; Takala, Arttu; Lehkonen, Riku; Frantti, Tapio; Savola, Reijo
Parent publication: Proceedings of the 23rd European Conference on Cyber Warfare and Security
Parent publication editors: Lehto, Martti
Conference:
- European Conference on Cyber Warfare and Security
Place and date of conference: Jyväskylä, Finland, 27.-28.6.2024
Journal or series: Proceedings of the European Conference on Cyber Warfare and Security
ISSN: 2048-8602
eISSN: 2048-8610
Publication year: 2024
Publication date: 21/06/2024
Volume: 23
Issue number: 1
Pages range: 487-495
Number of pages in the book: 847
Publisher: Academic Conferences International Ltd
Publication country: United Kingdom
Publication language: English
DOI: https://doi.org/10.34190/eccws.23.1.2335
Persistent website address: https://papers.academic-conferences.org/index.php/eccws/issue/view/33
Publication open access: Openly available
Publication channel open access: Open Access channel
Publication is parallel published (JYX): https://jyx.jyu.fi/handle/123456789/96211
Abstract
This research paper focuses on detecting cyber threats from the OT environment by combining data from multiple sources. Monitoring cyber security or hybrid threats in an industrial OT environment is difficult due to different equipment, protocols, environments, personnel management and training, etc. However, the OT environment can also be observed with a multisource sensor system, which can be used to collect data. By combining IT and OT data, additional cyber threats can be found. Especially concerning the integrity of OT command-and-control data. We deal with the key concepts and differences of the industrial operating environment, which create challenges compared to the traditional IT environment. This is important because the policies defined at the European level for the NIS2 regulation are coming to touch all member countries, regardless of what the national implementation schedule is. The increased standards for OT environment cyber security implementation and development will also have an impact on the personnel management and training to support the onboarding of the standards in practice. Critical infrastructure protection is important because, without the protection of critical infrastructure, vital functions cease to function. Hostile actors cause security challenges among Western actors. In this study, we delve into whether it is possible to find threats concerning OT command-and-control process. The increased data surface collected from the IT/OT environment improves the capabilities for the system to detect malicious attacks towards the OT system. With the help of test equipment, the goal is to demonstrate that it is possible to find threats by combining data from multiple sources. With the help of test equipment, we find out IT and OT capabilities, which we load with various attacks and anomalies. We produce added value compared to traditional monitoring method test cases by comparing data obtained from different sources. The research paper shows the importance of detecting OT threats. By monitoring IT and OT environments and combining their data, we can find hidden threats. Only one test equipment configuration has been used in the study, but the results can be generalized and classified. The study also provides guidelines for how the detection of cyber threat capabilities should be developed.
Keywords: cyber security; infrastructures; data systems
Free keywords: testbed environment; sensor integration; sensor data integrity; operational technology; cybersecurity
Contributing organizations
Ministry reporting: Yes
VIRTA submission year: 2024
Preliminary JUFO rating: 1
- Information Systems Science (Faculty of Information Technology IT) TJT
- Degree Education (Faculty of Information Technology IT) TUTK
- Engineering (Faculty of Information Technology IT) OHTE; Formerly Software and Communications Engineering
- Secure Communications Engineering and Signal Processing (Faculty of Information Technology IT) SCSP
Parent publication with JYU authors: