Newest papers

Latency-Neutral Passive Cyber Monitoring for Grid-Edge Operational Technology Networks

Damian Byrne, Emad Abukhousa, Jason Reed, Saman Zonouz · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.28324 · cited by 0 works (OpenAlex) · open-access PDF

Chinese

确定性工业网络往往在保持主控制环节的微秒时刻和捕捉安全遥测之间表现出一个操作的对比。这项工作调查了操作技术监督(OTSV)的工程可行性,这是一个三层被动监控框架,旨在解决在时间敏感的网端基础设施内的这种可见性挑战。通过在白金属硬件上使用3层未配置的被动摄入模式,通过物理交换端口分析器(SPAN)环节,深包检测引擎被从生产网络中分离出来,实施了软件强化的单向出口政策。在连续监控中进行的性能验证,包括32 927个活性监控环游时间(RTT)样本,在实验室监控环节中产生了稳定的延迟分布,而运行的Modus TCPbus

Machine translation (Meta M2M100); the English original follows.

Abstract

Deterministic industrial networks often present an operational trade-off between maintaining microsecond timing of primary control loops and capturing security telemetry. This work investigates the engineering feasibility of the Operational Technology Supervisor (OTSV), a three-tier passive monitoring framework designed to resolve this visibility challenge within timing-sensitive grid-edge infrastructure. By utilizing a Layer-3-unconfigured passive ingestion mode on bare-metal hardware via a physical switched port analyzer (SPAN) loop, the deep packet inspection engine is isolated from the production network, implementing a software-enforced unidirectional export policy. Performance validation conducted over a continuous audit comprising 32,927 active-monitoring round-trip time (RTT) samples yielded stable latency distributions across a laboratory power-monitoring loop running Modbus TCP and IEC 61850 MMS protocols. The measured latency delta between the unmonitored baseline and the active monitoring state was less than 0.12 milliseconds, supporting the feasibility of continuous high-fidelity security observation alongside stringent grid-edge metering timing bounds without measurably degrading the monitored reporting path.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Latency (audio), Modbus, Real-time computing, Network packet, Computer science, Engineering

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange