English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

In critical infrastructures, communication networks are used to exchangevital data among elements of Industrial Control Systems (ICSes). Due to thecriticality of such systems and the increase of the cybersecurity risks inthese contexts, best practices recommend the adoption of Intrusion DetectionSystems (IDSes) as monitoring facilities. The choice of the positions of IDSesis crucial to monitor as many streams of data traffic as possible. This isespecially true for the traffic patterns of ICS networks, mostly confined inmany subnetworks, which are geographically distributed and largely autonomous.We introduce a methodology and a software architecture that allow an ICSoperator to use the spare bandwidth that might be available in over-provisionednetworks to forward replicas of traffic streams towards a single IDS placed atan arbitrary location. We leverage certain characteristics of ICS networks,like stability of topology and bandwidth needs predictability, and make use ofthe Software-Defined Networking (SDN) paradigm. We fulfill strict requirementsabout packet loss, for both functional and security aspects. Finally, weevaluate our approach on network topologies derived from real networks.

Leveraging SDN to Monitor Critical Infrastricture Networks in a Smarter Way