@incollection {BC2011Alcaraz, title = {Security Aspects of SCADA and DCS Environments}, booktitle = {Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense}, series = {Advances in Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense. LNCS 7130.}, volume = {7130}, year = {2012}, month = {September 2012}, pages = {120-149}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Heidelberger (Berlin, Alemania)}, abstract = {

SCADA Systems can be seen as a fundamental component in Critical Infrastructures, having an impact in the overall performance of other Critical Infrastructures interconnected. Currently, these systems include in their network designs different types of Information and Communication Technology systems (such as the Internet and wireless technologies), not only to modernize operational processes but also to ensure automation and real-time control. Nonetheless, the use of these new technologies will bring new security challenges, which will have a significant impact on both the business process and home users. Therefore, the main purpose of this Chapter is to address these issues and to analyze the interdependencies of Process Control Systems with ICT systems, to discuss some security aspects and to offer some possible solutions and recommendations.

}, keywords = {Critical Information Infrastructure Protection, SCADA Systems}, isbn = {ISBN:978-3-642-28919-4}, issn = {0302-9743}, author = {Cristina Alcaraz and Gerardo Fernandez and Fernando Carvajal}, editor = {Javier Lopez and Stephen. Wolthunsen and Roberto Setola} } @inproceedings {NF_RECSI12, title = {Sistema Colaborativo de Detecci{\'o}n y Reacci{\'o}n ante Intrusiones basado en Intel vPro}, booktitle = {XII Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2012)}, year = {2012}, month = {Sep 2012}, pages = {45-50}, address = {San Sebasti{\'a}n}, abstract = {

En este trabajo proponemos una plataforma para el desarrollo de un sistema colaborativo para la detecci{\'o}n y reacci{\'o}n ante intrusiones, empleando como base las tecnolog{\'\i}as presentes en Intel vPro. La soluci{\'o}n presentada est{\'a} dirigida a solventar la necesidad de implantaci{\'o}n de nuevas tecnolog{\'\i}as que posibiliten la reacci{\'o}n ante ataques, independientemente del sistema operativo usado. Con este fin, en este trabajo abordamos tres puntos fundamentales: la detecci{\'o}n de intrusiones colaborativa, la respuesta autom{\'a}tica de los nodos ante la detecci{\'o}n de una intrusi{\'o}n y el uso de herramientas que posibiliten asegurar la confianza en un nodo. En un sistema colaborativo como el que se propone aqu{\'\i}, un aspecto clave para la seguridad es la protecci{\'o}n de las comunicaciones entre los mecanismos de detecci{\'o}n y reacci{\'o}n frente a intrusiones. La modificaci{\'o}n o el simple acceso a los datos intercambiados por tales sistemas supone un grave riesgo para la seguridad del entorno. Como resultado hemos desarrollado un prototipo preliminar para probar la soluci{\'o}n propuesta en un escenario de ataque real.

}, keywords = {IDS, Intel vPro, IRS}, isbn = {978-84-615-9933-2}, author = {Ana Nieto and Gerardo Fernandez} } @article {Alcaraz2008b, title = {Secure Management of SCADA Networks}, journal = {Novatica, New Trends in Network Management}, volume = {9}, number = {6}, year = {2008}, month = {December}, pages = {22-28}, publisher = {Cepis UPGRADE}, abstract = {

When a Supervisory Control and Data Acquisition (SCADA) system monitors and manages other complex infrastructures through the use of distributed technologies, it becomes a critical infrastructure by itself: A failure or disruption in any of its components could implicate a serious impact on the performance of the other infrastructures. The connection with other systems makes a SCADA system more vulnerable against attacks, generating new security problems. As a result, it is essential to perform diverse security analysis frequently in order to keep an updated knowledge and to provide recommendations and/or solutions to mitigate or avoid anomalous events. This will facilitate the existence of a suitable, reliable, and available control network.

}, keywords = {SCADA network management, Security Analysis, Supervisory Control and Data Acquisition Systems}, issn = {1684-5285}, url = {http://www.upgrade-cepis.org/issues/2008/6/up9-6Alcaraz.pdf}, author = {Cristina Alcaraz and Gerardo Fernandez and Rodrigo Roman and Angel Balastegui and Javier Lopez} }