Behavioural observation for critical infrastructure security support

The research presented in this paper offers a way of supporting the security currently in place in critical infrastructures by using behavioural observation to add to the Defence in Depth (DiD). Our approach is proactive and continually looks to identify patterns or behaviour, which is out of place in the ordinary operations of the infrastructure. As this work demonstrates, applying behavioural observation to critical infrastructure protection has effective results. In this paper, our design for Behavioural Observation for Critical Infrastructure Security Support (BOCISS) is presented. This entails an outline of the system architecture, an explanation of the system modes of operation, the development of a simulation for data construction purposes and the evaluation of our system using our simulated data.