Enhancing Attack Detection Capabilities in BACnet/IP Networks Using Machine-Learning Models

Building Automation Systems BAS manage critical building functions using protocols such as BACnet/IP, yet defenders have limited tooling and few labeled datasets for detecting BACnet-specific attacks. This work addresses these gaps through three contributions. First, CISA's Zeek BACnet parser is...