Handbook on Securing Cyber-Physical Critical Infrastructure

To properly secure a critical cyber–physical infrastructure, it is important to monitor it comprehensively and recognize “interesting” and actionable events in real time. Wireless devices and sensors play important roles in monitoring and detecting such events. Furthermore, owing to severe resource constraints on the sensors, the collected data may not be simply sent to a central place for processing; instead, mechanisms to reduce data (e.g., local filtering, aggregation, and simple event detection) and judicious distributed processing to recognize anomalies and patterns becomes essential.

A critical element of event monitoring is situational awareness so that monitoring, reasoning, and control actions can be efficiently managed. Online automated ...