Enhanced infrastructure security through inter-level anomaly detection

Nowadays information and automation technology infrastructures, as used in Critical Infrastructures, manufacturing plants or distributed sensor networks, have become very complex and dependant to automation. This does not only demand for higher bandwidths and bit rates in connecting network technologies, furthermore major security issues arise as seen over the last years. The vision of secure information and automation infrastructures cannot be achieved only by securing single parts, like a Programmable Logic Controller or Personal Computer, without looking at the interplay of components. The following paper shows an approach to enhance security in these infrastructures by detecting unknown anomalies thoughout all levels of automation, including the operator interface.