TY - CHAP A1 - Schuster, Franka ED - Mulliner, Collin ED - Stewin, Patrick T1 - Intrusion Detection for Automation Technology T2 - Proceedings of the Seventh GI SIG SIDAR Graduate Workshop on Reactive Security (SPRING) Y1 - 2012 UR - http://www.sec.t-labs.tu-berlin.de/spring/Program.html N1 - Technical Report SR-2012-01 PB - GI FG SIDAR CY - Berlin ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - König, Hartmut T1 - A Distributed Intrusion Detection System for Industrial Automation Networks T2 - Proceedings of the 17th International Conference on Emerging Technologies & Factory Automation, Krakau, Polen, September 2012 N2 - Modern automation is measured in terms of interoperability and easy administration. Introducing technology focussing on these criteria, however, induce new security risks to existing and future automation installations. Current security approaches in automation do not keep pace with the rising security challenges. Prevalent in automation is the use of access control to protect the system from malicious activity, such as extern attacks. Means to inspect the automation traffic to identify attacks that already have overcome access control or are initiated from inside the automation system are not available, yet. For filling this gap, we investigate in the application of intrusion detection techniques on industrial automation. In this paper, we present the current state of an intrusion detection system tailored to the analysis of operation down to traffic between automation devices on field layer. Y1 - 2012 SN - 978-1-4673-4736-5 U6 - https://doi.org/10.1109/ETFA.2012.6489703 SP - 1 EP - 4 PB - IEEE ER - TY - CHAP A1 - Paul, Andreas A1 - Schuster, Franka A1 - König, Hartmut T1 - Towards the Protection of Industrial Control Systems - Conclusions of a Vulnerability Analysis of Profinet IO T2 - Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings Y1 - 2013 SN - 978-3-642-39234-4 SP - 160 EP - 176 PB - Springer CY - Berlin [u.a.] ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - König, Hartmut T1 - Towards Learning Normality for Anomaly Detection in Industrial Control Networks T2 - Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013 Y1 - 2013 SN - 978-3-642-38997-9 SP - 61 EP - 72 PB - Heidleberg CY - Berlin [u.a.] ER - TY - CHAP A1 - Rietz, René A1 - Vogel, Michael A1 - Schuster, Franka A1 - König, Hartmut ED - Dietrich, Sven T1 - Parallelization of Network Intrusion Detection Systems under Attack Conditions T2 - Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014 Y1 - 2014 SN - 978-3-319-08508-1 SP - 172 EP - 191 PB - Springer International Publishing CY - Cham ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - Rietz, René A1 - König, Hartmut T1 - Potentials of Using One-class SVM for Detecting Protocol-specific Anomalies in Industrial Networks T2 - Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015) Y1 - 2015 U6 - https://doi.org/10.1109/SSCI.2015.22 SP - 83 EP - 90 PB - IEEE Press CY - New York ER - TY - CHAP A1 - Paul, Andreas A1 - Schuster, Franka A1 - König, Hartmut T1 - Network Topology Exploration for Industrial Networks T2 - 2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain Y1 - 2017 UR - http://www.springer.com/de/book/9783319525686 SN - 978-3-319-52568-6 U6 - https://doi.org/10.1007/978-3-319-52569-3 SP - 63 EP - 76 PB - Springer International Publishing CY - Cham ER - TY - GEN A1 - Schuster, Franka A1 - Paul, Andreas A1 - König, Hartmut T1 - Messung der technischen IT-Sicherheit in Energieversorgungsanlagen zur Erfüllung des IT-Sicherheitsgesetzes T2 - International Journal for Electricy and Heat Generation, VGB Powertech Y1 - 2017 SN - 1435-3199 VL - 97 IS - 3 SP - 76 EP - 82 ER - TY - CHAP A1 - Schuster, Franka A1 - Kopp, Fabian Malte A1 - Paul, Andreas A1 - König, Hartmut T1 - Attack and Fault Detection in Process Control Communication Using Unsupervised Machine Learning T2 - IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018 Y1 - 2018 SN - 978-1-5386-4829-2 U6 - https://doi.org/10.1109/INDIN.2018.8472054 SP - 433 EP - 438 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - Kopp, Fabian Malte A1 - König, Hartmut T1 - Catching Intrusions: Classifier Performances for Detecting Network-specific Anomalies in Energy Systems T2 - 2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018 Y1 - 2018 SN - 978-1-5386-5326-5 U6 - https://doi.org/10.1109/SEST.2018.8495702 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Rieck, Konrad A1 - Wressnegger, Christian A1 - König, Hartmut A1 - Paul, Andreas A1 - Schuster, Franka A1 - Kanisch, Heiko A1 - Moder, Christoph ED - Rudel, Steffi ED - Lechner, Ulrike T1 - Werkzeuge und Veröffentlichungen T2 - IT-Sicherheit für Kritische Infrastrukturen - State of the Art : Ergebnisse des Förderschwerpunkts IT-Sicherheit für Kritische Infrastrukturen ITS/KRITIS des BMBF Y1 - 2018 SN - 978-3-943207-33-0 SN - 978-3-943207-34-7 SP - S. 85 PB - Professur für Wirtschaftsinformatik, Universität der Bundeswehr München CY - Neubiberg ET - 1. Auflage ER -