A Survey of Specification-based Intrusion Detection Techniques for Cyber-Physical Systems

Cyber-physical systems (CPS) integrate computa-tion and communication capabilities to monitor control physical systems. Even though this integration improves the performance of overall system facilitates application CPS in several domains, it also introduces security challenges. Over years, intrusion detection (IDS) have been de-ployed as one controls for addressing these Traditionally, there are three main approaches IDS, namely: anomaly detection, misuse specification-based detection. However, due unique attributes CPS, traditional IDS need be modified or completely replaced before can deployed CPS. In paper, we present a survey techniques We classify existing literature according following attributes: specification source, extraction, specifi-cation modelling, mechanism, detector placement validation strategy. discuss details each attribute describe our observations, concerns future research directions. argue that reducing efforts time needed extract verifying correctness extracted open issues must addressed future.