Difficulties in modeling SCADA traffic: a comparative analysis

Authors:
Rafael R. R. Barbosa;Ramin Sadre;Aiko Pras
Affiliations:
Design and Analysis of Communication Systems (DACS), University of Twente, Enschede, The Netherlands;Design and Analysis of Communication Systems (DACS), University of Twente, Enschede, The Netherlands;Design and Analysis of Communication Systems (DACS), University of Twente, Enschede, The Netherlands
Venue:
PAM'12 Proceedings of the 13th international conference on Passive and Active Measurement
Year:
2012

Citing 9
Cited 2

On the self-similar nature of Ethernet traffic

ACM SIGCOMM Computer Communication Review - Special twenty-fifth anniversary issue. Highlights from 25 years of the Computer Communication Review
Wide area traffic: the failure of Poisson modeling

IEEE/ACM Transactions on Networking (TON)
Self-similarity in World Wide Web traffic: evidence and possible causes

IEEE/ACM Transactions on Networking (TON)
Difficulties in simulating the internet

IEEE/ACM Transactions on Networking (TON)
A compound model for TCP connection arrivals for LAN and WAN applications

Computer Networks: The International Journal of Computer and Telecommunications Networking - Special issue: Advances in modeling and engineering of Longe-Range dependent traffic
Changes in the Web from 2000 to 2007

DSOM '08 Proceedings of the 19th IFIP/IEEE international workshop on Distributed Systems: Operations and Management: Managing Large-Scale Service Deployment
Lognormal and Pareto distributions in the Internet

Computer Communications
Self-similarity and long range dependence on the internet: a second look at the evidence, origins and implications

Computer Networks: The International Journal of Computer and Telecommunications Networking - Special issue: Long range dependent trafic
Investigating self-similarity and heavy-tailed distributions on a large-scale experimental facility

IEEE/ACM Transactions on Networking (TON)

Traffic measurement and analysis of building automation and control networks

AIMS'12 Proceedings of the 6th IFIP WG 6.6 international autonomous infrastructure, management, and security conference on Dependable Networks and Services
Towards learning normality for anomaly detection in industrial control networks

AIMS'13 Proceedings of the 7th IFIP WG 6.6 international conference on Autonomous Infrastructure, Management, and Security: emerging management mechanisms for the future internet - Volume 7943

Quantified Score

Hi-index	0.00

Visualization

Abstract

Modern critical infrastructures, such as water distribution and power generation, are large facilities that are distributed over large geographical areas. Supervisory Control and Data Acquisition (SCADA) networks are deployed to guarantee the correct operation and safety of these infrastructures. In this paper, we describe key characteristics of SCADA traffic, verifying if models developed for traffic in traditional IT networks are applicable. Our results show that SCADA traffic largely differs from traditional IT traffic, more noticeably not presenting diurnal patters or self-similar correlations in the time series.