OS5-4 Inferring ICS Topology and Behavior through Network Traffic Analysis

Title:	OS5-4 Inferring ICS Topology and Behavior through Network Traffic Analysis
Publication:	ICAROB2025
Volume:	30
Pages:	128-131
ISSN:	2188-7829
DOI:	10.5954/ICAROB.2025.OS5-4
Author(s):	Chien-Wen Tseng, Jung-Shain Li, Chu-Fen Li, I-Hsien Liu
Publication Date:	February 13, 2025
Keywords:	Industrial Control Systems, Network Traffic Analysis, Industrial Control Communications
Abstract:	Ensuring the proper operation of industrial control systems (ICS) is a critical issue. Previous studies have focused on observing the controllers directly; however, this research proposes that analyzing network traffic could reduce system interference. This study utilizes a cybersecurity testing platform for dam systems to investigate network traffic to infer the composition of network nodes and the communication behavior between them. By doing so, it provides an alternative perspective for monitoring ICS operations. This model aids in understanding system topology, tracking potential deviations, and ensuring operational stability.
PDF File:	https://alife-robotics.co.jp/members2025/icarob/data/html/data/OS/OS5/OS5-4.pdf
Copyright:	© The authors. This article is distributed under the terms of the Creative Commons Attribution License 4.0, which permits non-commercial use, distribution and reproduction in any medium, provided the original work is properly cited. See for details: https://creativecommons.org/licenses/by-nc/4.0/