1. Connecting, Monitoring and Securing Manufacturing Assets 1 Yan Chen Professor, EECS Department Director, Lab for Internet & Security Technology (LIST) http://list.cs.northwestern.edu Northwestern University

2. DM-Box Add connection capability to DM equipment Easy to integrate Transmit multiple data streams: operation data, diagnosis data, control data Support flexible interconnection topology 2

3. DM-Box Design: Real-Time & Reliability 3 The most two important communication features in DM Problems: Wireless data transmission often encounter competition conflicts. Currently in the IEEE 802.11 protocol, the MAC layer uses CSMA/CD which can not ensure the real-time or reliability DM-Box solution: TDMA over Wi-Fi ensures each IoT device transmit data only in its own time slot and thus avoid interference.

4. DM-Box Implementation Specifications Support 4 types wireless cards simultaneously, 802.11 a/b/g/n 4 CPU nominal frequency300/600 MHz CPU core count1 Size of RAM64 MB ArchitectureMIPS-BE 10/100 Ethernet ports3 Supported input voltage10 V - 28 V PoE inYes PoE outNo Voltage MonitorNo PCB temperature monitorNo CPU temperature monitorNo Operating temperature range-40°C.. +70°C tested

5. 5

6. NetShield: Massive Semantics-Based Vulnerability Signature Matching for High-Speed Networks

7. 7 NIDS/NIPS Overview NIDS/NIPS (Network Intrusion Detection/Prevention System) Signature DB NIDS/NIPS Packets Security alerts Accuracy Speed 7

8. NetShield Challenges and Solutions 8 Challenges –Matching thousands of vulnerability signatures simultaneously Sequential matching  match multiple sigs. simultaneously –High speed protocol parsing Solutions (achieving 10s Gps throughput) –An efficient algorithm which matches multiple sigs simultaneously –A tailored parsing design for high-speed signature matching –Code & ruleset release at www.nshield.org