Intelligent Network Layer for Cyber-Physical Systems Security

TL;DR

This paper proposes a programmable network layer architecture using P4 language to enhance security and monitoring in heterogeneous cyber-physical systems, addressing specific application attacks.

Contribution

It introduces a novel programmable device network layer architecture leveraging P4 to detect and mitigate attacks in CPS environments.

Findings

Effective detection of HELLO Flood attack using P4-based solutions

Improved network security monitoring in heterogeneous CPS environments

Demonstrated minimal effort implementation for attack detection

Abstract

Cyber-Physical System (CPS) has made a tremendous progress in recent years and also disrupted many technical fields such as smart industries, smart health, smart transportation etc. to flourish the nations economy. However, CPS Security is still one of the concerns for wide adoption owing to high number of devices connecting to the internet and the traditional security solutions may not be suitable to protect the advanced, application specific attacks. This paper presents a programmable device network layer architecture to combat attacks and efficient network monitoring in heterogeneous environment CPS applications. We leverage Industrial control systems (ICS) to discuss the existing issues, highlighting the importance of advanced network layer for CPS. The programmable data plane language (P4) is introduced to detect well known HELLO Flood attack with minimal efforts in the network level and also used to featuring the potential solutions for security.