Title :
Deterministic Intrusion Detection Rules for MODBUS Protocols
Author :
Morris, Thomas H. ; Jones, Bryan A. ; Vaughn, Rayford B. ; Dandass, Yoginder S.
Abstract :
This paper introduces a set intrusion detection system rules for MODBUS/TCP and MODBUS over Serial Line systems. The rules described in this paper were derived from a vulnerability analysis of the MODBUS protocols. In total the paper describes 50 signature based intrusion detection system rules. Details on protocol requirements and the construction of the rules are provided for each rule. Rule descriptions are generic to encourage use on multiple intrusion detection system platforms.
Keywords :
Coils; Equations; Industrial control; Intrusion detection; Protocols; Registers; Servers; MODBUS; industrial control system; intrusion detection system;
Conference_Titel :
System Sciences (HICSS), 2013 46th Hawaii International Conference on
Conference_Location :
Wailea, HI, USA
Print_ISBN :
978-1-4673-5933-7
Electronic_ISBN :
1530-1605
DOI :
10.1109/HICSS.2013.174