Optimizing Internet Scanning for Assessing Industrial Systems Exposure - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2016

Optimizing Internet Scanning for Assessing Industrial Systems Exposure

Abstract

Industrial systems are composed of multiple components whose security has not been addressed for a while. Even if recent propositions target to improve it, they are still often exposed to vulnerabilities, since their components are hard to update or replace. In parallel, they tend to be more and more exposed in the public Internet for convenience. Although awareness of such a problem has been raised, there is no precise evaluation of such a risk. In this paper, we define a methodology to measure the exposure of industrial systems through Internet. In particular, a carefully designed scanning approach, named WiScan, is proposed with a low footprint due to the high sensitivity and low resources of targeted systems. It has been applied on the entire IPv4 address space, by targeting specific SCADA ports.

Keywords

Fichier principal
Vignette du fichier
trac2016CR.pdf (562.18 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01371674 , version 1 (17-11-2016)

Identifiers

Cite

Jérôme François, Abdelkader Lahmadi, Valentin Giannini, Damien Cupif, Frédéric Beck, et al.. Optimizing Internet Scanning for Assessing Industrial Systems Exposure. 7th International Workshop on TRaffic Analysis and Characterization, Sep 2016, Paphos, Cyprus. ⟨10.1109/IWCMC.2016.7577111⟩. ⟨hal-01371674⟩
482 View
475 Download

Altmetric

Share

Gmail Mastodon Facebook X LinkedIn More