A Malware-Tolerant, Self-Healing Industrial Control System Framework - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2017

A Malware-Tolerant, Self-Healing Industrial Control System Framework

Michael Denzel
  • Function : Author
  • PersonId : 1023800
Mark Ryan
  • Function : Author
  • PersonId : 994552
Eike Ritter
  • Function : Author
  • PersonId : 1023801


Industrial Control Systems (ICSs) are computers managing many critical infrastructures like power plants, aeroplanes, production lines, etc. While ICS were specialised hardware circuits without internet connection in former times, they are nowadays commodity computers with network connection, TCP/IP stack, and a full operating system, making them vulnerable to common attacks. The defensive mechanisms, however, are still lacking behind due to the strong requirement for availability of ICSs which prohibits to deploy typical countermeasures like e.g. an anti-virus. New techniques are needed to defend these systems under their distinct prerequisites.We introduce the concept of a malware-tolerant ICS network architecture which can still operate securely even when some components are entirely compromised by an attacker. This was done by replacing all single point-of-failures with multiple components verifying each other. We provide ProVerif proofs to show the correctness of the network protocol one-by-one assuming each device compromised.Furthermore, we added a self-healing mechanism based on invariants to the architecture on network as well as system level which will reset failed or compromised systems. To demonstrate system level self-healing, we implemented it on top of FreeRTOS and ARM TrustZone. The network level self-healing was incorporated into the ProVerif proofs by formally verifying the absence of type 1 (falsely identified attacks) and type 2 errors (missed attacks).
Fichier principal
Vignette du fichier
449885_1_En_4_Chapter.pdf (580.27 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01649003 , version 1 (27-11-2017)





Michael Denzel, Mark Ryan, Eike Ritter. A Malware-Tolerant, Self-Healing Industrial Control System Framework. 32th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), May 2017, Rome, Italy. pp.46-60, ⟨10.1007/978-3-319-58469-0_4⟩. ⟨hal-01649003⟩
498 View
87 Download



Gmail Facebook X LinkedIn More