@inproceedings{Schuster, author = {Schuster, Franka}, title = {Intrusion Detection for Automation Technology}, series = {Proceedings of the Seventh GI SIG SIDAR Graduate Workshop on Reactive Security (SPRING)}, booktitle = {Proceedings of the Seventh GI SIG SIDAR Graduate Workshop on Reactive Security (SPRING)}, editor = {Mulliner, Collin and Stewin, Patrick}, publisher = {GI FG SIDAR}, address = {Berlin}, pages = {S. 14}, language = {en} } @inproceedings{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {A Distributed Intrusion Detection System for Industrial Automation Networks}, series = {Proceedings of the 17th International Conference on Emerging Technologies \& Factory Automation, Krakau, Polen, September 2012}, booktitle = {Proceedings of the 17th International Conference on Emerging Technologies \& Factory Automation, Krakau, Polen, September 2012}, publisher = {IEEE}, isbn = {978-1-4673-4736-5}, doi = {10.1109/ETFA.2012.6489703}, pages = {1 -- 4}, abstract = {Modern automation is measured in terms of interoperability and easy administration. Introducing technology focussing on these criteria, however, induce new security risks to existing and future automation installations. Current security approaches in automation do not keep pace with the rising security challenges. Prevalent in automation is the use of access control to protect the system from malicious activity, such as extern attacks. Means to inspect the automation traffic to identify attacks that already have overcome access control or are initiated from inside the automation system are not available, yet. For filling this gap, we investigate in the application of intrusion detection techniques on industrial automation. In this paper, we present the current state of an intrusion detection system tailored to the analysis of operation down to traffic between automation devices on field layer.}, language = {en} } @inproceedings{PaulSchusterKoenig, author = {Paul, Andreas and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Towards the Protection of Industrial Control Systems - Conclusions of a Vulnerability Analysis of Profinet IO}, series = {Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings}, booktitle = {Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-39234-4}, pages = {160 -- 176}, language = {en} } @inproceedings{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Towards Learning Normality for Anomaly Detection in Industrial Control Networks}, series = {Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013}, booktitle = {Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013}, publisher = {Heidleberg}, address = {Berlin [u.a.]}, isbn = {978-3-642-38997-9}, pages = {61 -- 72}, language = {en} } @inproceedings{RietzVogelSchusteretal., author = {Rietz, Ren{\´e} and Vogel, Michael and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Parallelization of Network Intrusion Detection Systems under Attack Conditions}, series = {Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014}, booktitle = {Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014}, editor = {Dietrich, Sven}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-319-08508-1}, pages = {172 -- 191}, language = {en} } @inproceedings{SchusterPaulRietzetal., author = {Schuster, Franka and Paul, Andreas and Rietz, Ren{\´e} and K{\"o}nig, Hartmut}, title = {Potentials of Using One-class SVM for Detecting Protocol-specific Anomalies in Industrial Networks}, series = {Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015)}, booktitle = {Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015)}, publisher = {IEEE Press}, address = {New York}, doi = {10.1109/SSCI.2015.22}, pages = {83 -- 90}, language = {en} } @inproceedings{PaulSchusterKoenig, author = {Paul, Andreas and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Network Topology Exploration for Industrial Networks}, series = {2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain}, booktitle = {2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-319-52568-6}, doi = {10.1007/978-3-319-52569-3}, pages = {63 -- 76}, language = {en} } @misc{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Messung der technischen IT-Sicherheit in Energieversorgungsanlagen zur Erf{\"u}llung des IT-Sicherheitsgesetzes}, series = {International Journal for Electricy and Heat Generation, VGB Powertech}, volume = {97}, journal = {International Journal for Electricy and Heat Generation, VGB Powertech}, number = {3}, issn = {1435-3199}, pages = {76 -- 82}, language = {de} } @inproceedings{SchusterKoppPauletal., author = {Schuster, Franka and Kopp, Fabian Malte and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Attack and Fault Detection in Process Control Communication Using Unsupervised Machine Learning}, series = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, booktitle = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-4829-2}, doi = {10.1109/INDIN.2018.8472054}, pages = {433 -- 438}, language = {en} } @inproceedings{SchusterPaulKoppetal., author = {Schuster, Franka and Paul, Andreas and Kopp, Fabian Malte and K{\"o}nig, Hartmut}, title = {Catching Intrusions: Classifier Performances for Detecting Network-specific Anomalies in Energy Systems}, series = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, booktitle = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-5326-5}, doi = {10.1109/SEST.2018.8495702}, pages = {6}, language = {en} } @incollection{RieckWressneggerKoenigetal., author = {Rieck, Konrad and Wressnegger, Christian and K{\"o}nig, Hartmut and Paul, Andreas and Schuster, Franka and Kanisch, Heiko and Moder, Christoph}, title = {Werkzeuge und Ver{\"o}ffentlichungen}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {S. 85}, language = {de} }