Development of an Intelligent and Resilient Security Box to Defend Against Insider Attacks in Cyber-Physical Systems

In spite of increasing significance in many industries, Cyber-Physical Systems (CPS) are extremely susceptible to insider attacks. By exploiting system knowledge and legitimate access, insiders can cause significant disruption to operations while remaining undetected. The proposed work adopts an intelligent method that employs network data monitoring, sniffing, and analysis to identify and profile insider threats in a CPS. The proposed methodology is carried out by using three phases: Reinforcing security and network hygiene guidelines, Finding possible attack areas, and Performing risk assessment on the basis of observed anomalies. For the purpose of explaining the vulnerabilities of legacy CPS networks, the suggested system emulates an insider- initiated Man-in-the-Middle (MITM) attack. The results offer a basis for the design of effective mitigation tactics against insider threats and emphasize the necessity of a wider cyber-physical security point of view.