• DocumentCode
    1579174
  • Title

    Deterministic Intrusion Detection Rules for MODBUS Protocols

  • Author

    Morris, Thomas H. ; Jones, Bryan A. ; Vaughn, Rayford B. ; Dandass, Yoginder S.

  • fYear
    2013
  • Firstpage
    1773
  • Lastpage
    1781
  • Abstract
    This paper introduces a set intrusion detection system rules for MODBUS/TCP and MODBUS over Serial Line systems. The rules described in this paper were derived from a vulnerability analysis of the MODBUS protocols. In total the paper describes 50 signature based intrusion detection system rules. Details on protocol requirements and the construction of the rules are provided for each rule. Rule descriptions are generic to encourage use on multiple intrusion detection system platforms.
  • Keywords
    Coils; Equations; Industrial control; Intrusion detection; Protocols; Registers; Servers; MODBUS; industrial control system; intrusion detection system;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    System Sciences (HICSS), 2013 46th Hawaii International Conference on
  • Conference_Location
    Wailea, HI, USA
  • ISSN
    1530-1605
  • Print_ISBN
    978-1-4673-5933-7
  • Electronic_ISBN
    1530-1605
  • Type

    conf

  • DOI
    10.1109/HICSS.2013.174
  • Filename
    6480055
    • Link To Document
    https://search.isc.ac/dl/search/defaultta.aspx?DTC=49&DC=1579174