Connecting, Monitoring and Securing Manufacturing Assets

1
Connecting, Monitoring and Securing
Manufacturing Assets

• Yan Chen
• Professor, EECS Department
• Director, Lab for Internet Security Technology
  (LIST)
• http//list.cs.northwestern.edu
• Northwestern University

2
DM-Box

• Add connection capability to DM equipment
• Easy to integrate
• Transmit multiple data streams operation data,
  diagnosis data, control data
• Support flexible interconnection topology

3
DM-Box Design Real-Time Reliability

• The most two important communication features in
  DM
• Problems
• Wireless data transmission often encounter
  competition conflicts.
• Currently in the IEEE 802.11 protocol, the MAC
  layer uses CSMA/CD which can not ensure the
  real-time or reliability
• DM-Box solution
• TDMA over Wi-Fi ensures each IoT device transmit
  data only in its own time slot and thus avoid
  interference.

4
DM-Box Implementation Specifications

• Support 4 types wireless cards simultaneously,
  802.11 a/b/g/n

CPU nominal frequency 300/600 MHz
CPU core count 1
Size of RAM 64 MB
Architecture MIPS-BE
10/100 Ethernet ports 3
Supported input voltage 10 V - 28 V
PoE in Yes
PoE out No
Voltage Monitor No
PCB temperature monitor No
CPU temperature monitor No
Operating temperature range -40C .. 70C tested
5
(No Transcript)
6
NetShield Massive Semantics-Based Vulnerability
Signature Matching for High-Speed Networks
7
NIDS/NIPS Overview

• NIDS/NIPS (Network Intrusion
  Detection/Prevention System)

NIDS/NIPS
Packets

• Accuracy
• Speed

Security alerts
7
8
NetShield Challenges and Solutions

• Challenges
• Matching thousands of vulnerability signatures
  simultaneously
• Sequential matching ?match multiple sigs.
  simultaneously
• High speed protocol parsing
• Solutions (achieving 10s Gps throughput)
• An efficient algorithm which matches multiple
  sigs simultaneously
• A tailored parsing design for high-speed
  signature matching
• Code ruleset release at www.nshield.org