A4 Article in conference proceedings
Validation of Sensor Data Integrity in OT Environments Through Multisource Data Sensors (2024)


Simola, J., Takala, A., Lehkonen, R., Frantti, T., & Savola, R. (2024). Validation of Sensor Data Integrity in OT Environments Through Multisource Data Sensors. In M. Lehto (Ed.), Proceedings of the 23rd European Conference on Cyber Warfare and Security (23, pp. 487-495). Academic Conferences International Ltd. Proceedings of the European Conference on Cyber Warfare and Security. https://doi.org/10.34190/eccws.23.1.2335


JYU authors or editors


Publication details

All authors or editorsSimola, Jussi; Takala, Arttu; Lehkonen, Riku; Frantti, Tapio; Savola, Reijo

Parent publicationProceedings of the 23rd European Conference on Cyber Warfare and Security

Parent publication editorsLehto, Martti

Conference:

  • European Conference on Cyber Warfare and Security

Place and date of conferenceJyväskylä, Finland27.-28.6.2024

Journal or seriesProceedings of the European Conference on Cyber Warfare and Security

ISSN2048-8602

eISSN2048-8610

Publication year2024

Publication date21/06/2024

Volume23

Issue number1

Pages range487-495

Number of pages in the book847

PublisherAcademic Conferences International Ltd

Publication countryUnited Kingdom

Publication languageEnglish

DOIhttps://doi.org/10.34190/eccws.23.1.2335

Persistent website addresshttps://papers.academic-conferences.org/index.php/eccws/issue/view/33

Publication open accessOpenly available

Publication channel open accessOpen Access channel

Publication is parallel published (JYX)https://jyx.jyu.fi/handle/123456789/96211


Abstract

This research paper focuses on detecting cyber threats from the OT environment by combining data from multiple sources. Monitoring cyber security or hybrid threats in an industrial OT environment is difficult due to different equipment, protocols, environments, personnel management and training, etc. However, the OT environment can also be observed with a multisource sensor system, which can be used to collect data. By combining IT and OT data, additional cyber threats can be found. Especially concerning the integrity of OT command-and-control data. We deal with the key concepts and differences of the industrial operating environment, which create challenges compared to the traditional IT environment. This is important because the policies defined at the European level for the NIS2 regulation are coming to touch all member countries, regardless of what the national implementation schedule is. The increased standards for OT environment cyber security implementation and development will also have an impact on the personnel management and training to support the onboarding of the standards in practice. Critical infrastructure protection is important because, without the protection of critical infrastructure, vital functions cease to function. Hostile actors cause security challenges among Western actors. In this study, we delve into whether it is possible to find threats concerning OT command-and-control process. The increased data surface collected from the IT/OT environment improves the capabilities for the system to detect malicious attacks towards the OT system. With the help of test equipment, the goal is to demonstrate that it is possible to find threats by combining data from multiple sources. With the help of test equipment, we find out IT and OT capabilities, which we load with various attacks and anomalies. We produce added value compared to traditional monitoring method test cases by comparing data obtained from different sources. The research paper shows the importance of detecting OT threats. By monitoring IT and OT environments and combining their data, we can find hidden threats. Only one test equipment configuration has been used in the study, but the results can be generalized and classified. The study also provides guidelines for how the detection of cyber threat capabilities should be developed.


Keywordscyber securityinfrastructuresdata systems

Free keywordstestbed environment; sensor integration; sensor data integrity; operational technology; cybersecurity


Contributing organizations


Ministry reportingYes

VIRTA submission year2024

Preliminary JUFO rating1


Last updated on 2024-14-09 at 20:05