Stealthy Deception Attacks Against SCADA Systems

SCADA protocols for Industrial Control Systems (ICS) are vulnerable to network attacks such as session hijacking. Hence, research focuses on network anomaly detection based on meta--data (message sizes, timing, command sequence), or on the state values of the physical process. In this work we present a class of semantic network-based attacks against SCADA systems that are undetectable by the above mentioned anomaly detection. After hijacking the communication channels between the Human Machine Interface (HMI) and Programmable Logic Controllers (PLCs), our attacks cause the HMI to present a fake view of the industrial process, deceiving the human operator into taking manual actions. Our most advanced attack also manipulates the messages generated by the operator's actions, reversing their semantic meaning while causing the HMI to present a view that is consistent with the attempted human actions. The attacks are totaly stealthy because the message sizes and timing, the command sequences, and the data values of the ICS's state all remain legitimate. We implemented and tested several attack scenarios in the test lab of our local electric company, against a real HMI and real PLCs, separated by a commercial-grade firewall. We developed a real-time security assessment tool, that can simultaneously manipulate the communication to multiple PLCs and cause the HMI to display a coherent system--wide fake view. Our tool is configured with message-manipulating rules written in an ICS Attack Markup Language (IAML) we designed, which may be of independent interest. Our semantic attacks all successfully fooled the operator and brought the system to states of blackout and possible equipment damage

Serotonin drives striatal synaptic plasticity in a sex-related manner

Introduction: Plasticity at corticostriatal synapses is a key substrate for a variety of brain functions – including motor control, learning and reward processing – and is often disrupted in disease conditions. Despite intense research pointing toward a dynamic interplay between glutamate, dopamine (DA), and serotonin (5-HT) neurotransmission, their precise circuit and synaptic mechanisms regulating their role in striatal plasticity are still unclear. Here, we analyze the role of serotonergic raphe-striatal innervation in the regulation of DA-dependent corticostriatal plasticity. Methods: Mice (males and females, 2–6 months of age) were housed in standard plexiglass cages at constant temperature (22 ± 1 °C) and maintained on a 12/12 h light/dark cycle with food and demineralized water ad libitum. In the present study, we used a knock-in mouse line in which the green fluorescent protein reporter gene (GFP) replaced the I Tph2 exon (Tph2GFP mice), allowing selective expression of GFP in the whole 5-HT system, highlighting both somata and neuritis of serotonergic neurons. Heterozygous, Tph2+/GFP, mice were intercrossed to obtain experimental cohorts, which included Wild-type (Tph2+/+), Heterozygous (Tph2+/GFP), and Mutant serotonin-depleted (Tph2GFP/GFP) animals. Results: Using male and female mice, carrying on different Tph2 gene dosages, we show that Tph2 gene modulation results in sex-specific corticostriatal abnormalities, encompassing the abnormal amplitude of spontaneous glutamatergic transmission and the loss of Long Term Potentiation (LTP) in Tph2GFP/GFP mice of both sexes, while this form of plasticity is normally expressed in control mice (Tph2+/+). Once LTP is induced, only the Tph2+/GFP female mice present a loss of synaptic depotentiation. Conclusion: We showed a relevant role of the interaction between dopaminergic and serotonergic systems in controlling striatal synaptic plasticity. Overall, our data unveil that 5-HT plays a primary role in regulating DA-dependent corticostriatal plasticity in a sex-related manner and propose altered 5-HT levels as a critical determinant of disease-associated plasticity defects

Automated Model-based Attack Tree Analysis using HiP-HOPS

As Cyber-Physical Systems (CPS) grow increasingly complex and interact with external CPS, system security remains a nontrivial challenge that continues to scale accordingly, with potentially devastating consequences if left unchecked. While there is a significant body of work on system security found in industry practice, manual diagnosis of security vulnerabilities is still widely applied. Such approaches are typically resource-intensive, scale poorly and introduce additional risk due to human error. In this paper, a model-based approach for Security Attack Tree analysis using the HiP-HOPS dependability analysis tool is presented. The approach is demonstrated within the context of a simple web-based medical application to automatically generate attack trees, encapsulated as Digital Dependability Identities (DDIs), for offline security analysis. The paper goes on to present how the produced DDIs can be used to approach security maintenance, identifying security capabilities and controls to counter diagnosed vulnerabilities

Dysfunctional dopaminergic neurotransmission in asocial BTBR mice

Autism spectrum disorders (ASD) are neurodevelopmental conditions characterized by pronounced social and communication deficits and stereotyped behaviours. Recent psychosocial and neuroimaging studies have highlighted reward-processing deficits and reduced dopamine (DA) mesolimbic circuit reactivity in ASD patients. However, the neurobiological and molecular determinants of these deficits remain undetermined. Mouse models recapitulating ASD-like phenotypes could help generate hypotheses about the origin and neurophysiological underpinnings of clinically relevant traits. Here we used functional magnetic resonance imaging (fMRI), behavioural and molecular readouts to probe dopamine neurotransmission responsivity in BTBR T+ Itpr3tf/J mice (BTBR), an inbred mouse line widely used to model ASD-like symptoms owing to its robust social and communication deficits, and high level of repetitive stereotyped behaviours. C57BL/6J (B6) mice were used as normosocial reference comparators. DA reuptake inhibition with GBR 12909 produced significant striatal DA release in both strains, but failed to elicit fMRI activation in widespread forebrain areas of BTBR mice, including mesolimbic reward and striatal terminals. In addition, BTBR mice exhibited no appreciable motor responses to GBR 12909. DA D1 receptor-dependent behavioural and signalling responses were found to be unaltered in BTBR mice, whereas dramatic reductions in pre- and postsynaptic DA D2 and adenosine A2A receptor function was observed in these animals. Overall these results document profoundly compromised DA D2-mediated neurotransmission in BTBR mice, a finding that is likely to have a role in the distinctive social and behavioural deficits exhibited by these mice. Our results call for a deeper investigation of the role of dopaminergic dysfunction in mouse lines exhibiting ASD-like phenotypes, and possibly in ASD patient populations

Sensitivity Studies for Third-Generation Gravitational Wave Observatories

Advanced gravitational wave detectors, currently under construction, are expected to directly observe gravitational wave signals of astrophysical origin. The Einstein Telescope, a third-generation gravitational wave detector, has been proposed in order to fully open up the emerging field of gravitational wave astronomy. In this article we describe sensitivity models for the Einstein Telescope and investigate potential limits imposed by fundamental noise sources. A special focus is set on evaluating the frequency band below 10Hz where a complex mixture of seismic, gravity gradient, suspension thermal and radiation pressure noise dominates. We develop the most accurate sensitivity model, referred to as ET-D, for a third-generation detector so far, including the most relevant fundamental noise contributions.Comment: 13 pages, 7 picture

Scientific Potential of Einstein Telescope

Einstein gravitational-wave Telescope (ET) is a design study funded by the European Commission to explore the technological challenges of and scientific benefits from building a third generation gravitational wave detector. The three-year study, which concluded earlier this year, has formulated the conceptual design of an observatory that can support the implementation of new technology for the next two to three decades. The goal of this talk is to introduce the audience to the overall aims and objectives of the project and to enumerate ET's potential to influence our understanding of fundamental physics, astrophysics and cosmology.Comment: Conforms to conference proceedings, several author names correcte

Scientific Objectives of Einstein Telescope

The advanced interferometer network will herald a new era in observational astronomy. There is a very strong science case to go beyond the advanced detector network and build detectors that operate in a frequency range from 1 Hz-10 kHz, with sensitivity a factor ten better in amplitude. Such detectors will be able to probe a range of topics in nuclear physics, astronomy, cosmology and fundamental physics, providing insights into many unsolved problems in these areas.Comment: 18 pages, 4 figures, Plenary talk given at Amaldi Meeting, July 201

The variable finesse locking technique

Virgo is a power recycled Michelson interferometer, with 3 km long Fabry-Perot cavities in the arms. The locking of the interferometer has been obtained with an original lock acquisition technique. The main idea is to lock the instrument away from its working point. Lock is obtained by misaligning the power recycling mirror and detuning the Michelson from the dark fringe. In this way, a good fraction of light escapes through the antisymmetric port and the power build-up inside the recycling cavity is extremely low. The benefit is that all the degrees of freedom are controlled when they are almost decoupled, and the linewidth of the recycling cavity is large. The interferometer is then adiabatically brought on to the dark fringe. This technique is referred to as variable finesse, since the recycling cavity is considered as a variable finesse Fabry-Perot. This technique has been widely tested and allows us to reach the dark fringe in few minutes, in an essentially deterministic way

Astrophysically Triggered Searches for Gravitational Waves: Status and Prospects

In gravitational-wave detection, special emphasis is put onto searches that focus on cosmic events detected by other types of astrophysical observatories. The astrophysical triggers, e.g. from gamma-ray and X-ray satellites, optical telescopes and neutrino observatories, provide a trigger time for analyzing gravitational wave data coincident with the event. In certain cases the expected frequency range, source energetics, directional and progenitor information is also available. Beyond allowing the recognition of gravitational waveforms with amplitudes closer to the noise floor of the detector, these triggered searches should also lead to rich science results even before the onset of Advanced LIGO. In this paper we provide a broad review of LIGO's astrophysically triggered searches and the sources they target

Calibration and sensitivity of the Virgo detector during its second science run

The Virgo detector is a kilometer-length interferometer for gravitational wave detection located near Pisa (Italy). During its second science run (VSR2) in 2009, six months of data were accumulated with a sensitivity close to its design. In this paper, the methods used to determine the parameters for sensitivity estimation and gravitational wave reconstruction are described. The main quantities to be calibrated are the frequency response of the mirror actuation and the sensing of the output power. Focus is also put on their absolute timing. The monitoring of the calibration data as well as the parameter estimation with independent techniques are discussed to provide an estimation of the calibration uncertainties. Finally, the estimation of the Virgo sensitivity in the frequency-domain is described and typical sensitivities measured during VSR2 are shown.Comment: 30 pages, 23 figures, 1 table. Published in Classical and Quantum Gravity (CQG), Corrigendum include