TSNZeek: An Open-source Intrusion Detection System for IEEE 802.1 Time-sensitive Networking. (arXiv:2303.11492v1 [cs.CR])

IEEE 802.1 Time-sensitive Networking~(TSN) standards are envisioned to
replace legacy network protocols in critical domains to ensure reliable and
deterministic communication over off-the-shelf Ethernet equipment. However,
they lack security countermeasures and can even impose new attack vectors that
may lead to hazardous consequences. This paper presents the first open-source
security monitoring and intrusion detection mechanism, TSNZeek, for IEEE 802.1
TSN protocols. We extend an existing monitoring tool, Zeek, with a new packet
parsing grammar to process TSN data traffic and …

attack attack vectors communication countermeasures critical detection domains equipment ethernet ieee intrusion intrusion detection intrusion detection system legacy may monitoring monitoring tool network networking protocols security standards system tool