Monitoring and policing systems - A categorization and survey within ICS

The report presents a frame work for classification of intrusion detection systems (IDS) used in Industrial Control Systems (ICS) based on existing frame works for IDS in IT systems. The frame work can function as a support when performing requirements engineering and procurement of IDS for ICS. Furthermore the report gives examples of current research and commercial systems within the area. The report shows that IDS for ICS are subject to a number of specific requirements and that ICS IT security wise is under-developed in relative to the increasing internet connection of such systems. The need for working and adapted IDS for ICS is therefore significant.