LCS : A Low-Cost, Low-Prowess OT Security Automation Framework

カテゴリ: 研究会(論文単位)

論文No: CMN25031

グループ名: 【C】電子・情報・システム部門 通信研究会

発行日: 2025/02/28

タイトル(英語): LCS : A Low-Cost, Low-Prowess OT Security Automation Framework

著者名: Mehra Sahil(Hitachi India Pvt Ltd),Dey Sumanta(Hitachi India Pvt Ltd),Mukherjee Subhojeet(Hitachi India Pvt Ltd),MC Sanjana(Hitachi India Pvt Ltd),Kalle Ritesh (Hitachi India Pvt Ltd)

著者名(英語): Sahil Mehra(Hitachi India Pvt Ltd),Sumanta Dey(Hitachi India Pvt Ltd),Subhojeet Mukherjee(Hitachi India Pvt Ltd),Sanjana MC(Hitachi India Pvt Ltd),Ritesh Kalle(Hitachi India Pvt Ltd)

キーワード: Cyber security|Cyber attack|Operational Technology|Security Automation|Cyber security|Cyber attack|Operational Technology|Security Automation

要約(日本語): In 2024, according to a report by Palo Alto Networks, 70 percent of worldwide Operation Technology (OT) firms have witnessed cyberattacks, resulting in millions of dollars in damages. This highlights the need for an end-to end automated security solution

要約(英語): In 2024, according to a report by Palo Alto Networks, 70 percent of worldwide Operation Technology (OT) firms have witnessed cyberattacks, resulting in millions of dollars in damages. This highlights the need for an end-to end automated security solution to analyze potential security vulnerabilities in OT networks with minimal human intervention. However, current state-of-the-art security solutions either come with hefty price tags and/or demand special skills/training to operate them effectively. In this work, we explore the use of free and open-source tools_x000D_ to automate the process of extrapolating the OT network and collect as much topology information as possible. In addition, we propose a new attack path analysis algorithm that works even with partial information by leveraging meta-class-level ontology information and outputs a metric that describes the fuzziness in the collected information quality. We have also demonstrated the effectiveness of our low-cost, highly automated framework on lab-scale IT and OT networks.

本誌: 2025年3月3日-2025年3月4日通信研究会

本誌掲載ページ: 53-58 p

原稿種別: 英語

PDFファイルサイズ: 1,805 Kバイト