Cyber Security of Physical Systems

The objective of this proposal is to demonstrate the feasibility of using Inline Physical Security (IPS) hardware between the interface of IoT devices and the internet. The device works at layer 2 and 3 of the Open System Interconnection (OSI) model as a traffic controller to prevent malicious network flow reaching the target destination. The IPS works by utilizing open source tools and custom developed scripts. The first tool used is a network Intrusion Detection Software (IDS), called Suricata. The Suricata engine is capable of real time intrusion detection, inline intrusion prevention (IIP), and network security monitoring (NSM). We use Suricata to remove executable files from the network traffic flow and send them to a second open source tool called ClamAV. ClamAV is an antivirus program which allows virus scanning, classification, removal, and reporting.