short-paper

Open access

Keynote: A Tale of Two Industroyers: It was the Season of Darkness

Author:

Alvaro A. CardenasAuthors Info & Claims

CPSS '24: Proceedings of the 10th ACM Cyber-Physical System Security Workshop

Page 1

https://doi.org/10.1145/3626205.3665197

Published: 01 July 2024 Publication History

PDF eReader

Abstract

In this talk, we discuss the first two known pieces of malware that attempted to create power grid blackouts. While previous research had described the malware at a high level, in this talk, we take a deep dive into the payload targeting the operational equipment of power grid networks. Our findings include new malware behavior that was not previously documented, the software bugs of the malware, and the evolution of attacks against the power grid in Ukraine. We end our talk by discussing how similar malware may evolve in the future and the risks they pose to the power grid.

Index Terms

Keynote: A Tale of Two Industroyers: It was the Season of Darkness
1. Security and privacy
  1. Intrusion/anomaly detection and malware mitigation
    1. Malware and its mitigation

Recommendations

Malware Clearance for Secure Commitment of OS-Level Virtual Machines

A virtual machine(VM) can be simply created upon use and disposed upon the completion of the tasks or the detection of error. The disadvantage of this approach is that if there is no malicious activity, the user has to redo all of the work in her actual ...
Analysis and classification of context-based malware behavior
Abstract
This paper presents an overview of the findings on trigger-based malware behavior elicitation, classification, modeling, and behavioral signature generation. Considering reactions to environmental conditions, we suggest a new ...
Intrusion detection for power grid: a review
Abstract
Cyber-attacks on power system assets are increasingly causing disruption of operations for modern-day utilities. Intrusion detection systems are essential for the detection and categorization of these attacks in real-time. A large number of ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

CPSS '24: Proceedings of the 10th ACM Cyber-Physical System Security Workshop

July 2024

116 pages

ISBN:9798400704208

DOI:10.1145/3626205

Program Chairs:
Jianying Zhou
SUTD, Singapore
,
Sudipta Chattopadhyay
SUTD, Singapore

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 01 July 2024

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Short-paper
Research
Refereed limited

Conference

ASIA CCS '24

Sponsor:

SIGSAC

ASIA CCS '24: ACM Asia Conference on Computer and Communications Security

July 2, 2024

Singapore, Singapore

Acceptance Rates

CPSS '24 Paper Acceptance Rate 10 of 22 submissions, 45%;

Overall Acceptance Rate 43 of 135 submissions, 32%

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

0
Total Citations
168
Total Downloads

Downloads (Last 12 months)168
Downloads (Last 6 weeks)22

Reflects downloads up to 12 Jan 2025

Other Metrics

View Author Metrics

Citations

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Index Terms

Recommendations

Malware Clearance for Secure Commitment of OS-Level Virtual Machines

Analysis and classification of context-based malware behavior

Intrusion detection for power grid: a review