21 August – CSIT PhD and Post-Doc Seminar

Please join us to hear from our current CSIT PhD students and post-doc researchers on their latest research activities. Tea/Coffee served from 14:45.

14:45 Tea/coffee
15:00 – Rafiullah Khan Demonstrating Cyber-Physical Attacks and Defense for Synchrophasor Technology in Smart Grid This paper investigates how an attacker can develop execute stealthy man-in-the-middle attacks against synchrophasor devices. Four different types of attack capabilities have been demonstrated in a real synchrophasor-based synchronous islanding testbed.
15:20 – Peter Maynard An Open Framework for Deploying Experimental SCADA Testbed Networks A scalable framework for automatically deploying locally (or remotely) a number of virtual machines which replicate a Process Control Network (PCN) is proposed. This allows researchers to build a testbed which can be configured to replicate real-world deployments.
15:40 – Henry Hui Investigating Current PLC Security Issues Regarding Siemens S7 Communications and TIA Portal This work investigates security of Siemens S7-1211C PLCs and TIA engineering software. Here, the antireplay mechanism of the communication protocol, S7CommPlus, and the Profinet Discovery and Basic Configuration Protocol are found to be vulnerable.
16:00 – Domhnall Carlin Detecting Cryptomining Using Dynamic Analysis This research demonstrates that dynamic opcode tracing is extremely effective at detecting cryptomining behaviours within a browser. Our results show that browser-based cryptomining is entirely detectable by dynamic opcode analysis, with accuracies of up to 100%.
16:20 – Matthew Hagan Peer Based Tracking using Multi-Tuple Indexing for Network Traffic Analysis and Malware Detection The concept of applying multiple tuple indexes to network traffic and generating metadata consisting of malicious trait indicators is investigated, to better understand associations of events between connections. This concept has been implemented and demonstrated using a multi-peered ZeuS botnet.