Abstract:Industrial control systems (ICS) like supervisory control and data acquisition (SCADA) systems play a crucial role in monitoring and controlling various process industries in national critical infrastructures. They are connecting to internet and highly inter-connected corporate networks for sharing the field data to third party heterogeneous systems like enterprise resource planning, third party SCADA systems etc. Even though it helps to share the data for monitoring and control of systems, it also opens the doors for cyber-attacks. It needs to strengthen the cyber security of these SCADA systems. There are various components in SCADA systems which requires to build security in these components. Generally, most of the SCADA systems uses MODBUS communication protocol for scanning the PLC devices to acquire the field data. The communication protocol security is one of the main components which was little addressed. The MODBUS protocol was developed without security in mind because security aspect was not a concern in closed environments of industrial control systems. It is highly vulnerable to cyber-attacks. There are some methods already developed by scholars to implement security in MODBUS protocol, but the existing methods modified the MODBUS frame formats. Hence, they are not suitable to the existing legacy systems because they do not support interoperability between various industry manufacturer’s products. Another critical problem in existing methods is all the required security features were not implemented in a single method which would satisfy the security features like integrity, confidentiality, non-repudiation, authorization and authentication. In this paper, we designed and developed a new method by developing Secure Modbus Gateway Server and Client modules to provide secure data transfer between data acquisition servers and PLCs. In this methodology, the modules were developed using RSA and AES algorithms for achieving confidentiality and non-repudiation, SHA algorithm to provide integrity of the message. These modules also support authorization and authentication features. The time stamp in the Modbus frame was also included and transmitted to prevent replay attacks. The advantages of these modules/methodology are, it supports all required features for secure data transfer like integrity, confidentiality, non-repudiation, authorization and authentication. They also provide time stamp, frame filtering and exception response alarm triggering features. These modules also support interoperability and they can be easily installed in existing legacy systems. We measured performance metrics like attack resilience rate (ARP), attack penetration rate (APR) and overheads. This method protects the ICS system for 97% of attacks. The overhead on protocol was also calculated and it is found that 3.5% extra delay in round trip time which is very minor and can be tolerated in exchange of the important security benefits offered.

Design of a secure remote management module for a software-operated medical device

Design of Power Assign Manager for Remote Power Supply Based on Network Line

Design and Application of a Software in Medical Equipment Detecting and Risk Assessment

e-SAFE: Secure, Efficient and Forensics-Enabled Access to Implantable Medical Devices

Understanding and Mitigating Security Risks of Network on Medical Cyber Physical System

Keep an eye on your personal belongings! The security of personal medical devices and their ecosystems

Secure Digital Administration in Medical Environment

Cybersecurity and medical devices: A practical guide for cardiac electrophysiologists

Towards Evaluating the Security of Wearable Devices in the Internet of Medical Things

Distributed Real-Time Emulation of Formally-Defined Patterns for Safe Medical Device Control

A Biomechatronic Approach to Evaluating the Security of Wearable Devices in the Internet of Medical Things

Security vulnerabilities in healthcare: an analysis of medical devices and software

A multiagent based framework secured with layered SVM-based IDS for remote healthcare systems

Management and Detection System for Medical Surgical Equipment

A Secure Medical Information Management System for Wireless Body Area Networks

A survey on security issues in modern Implantable Devices: Solutions and future issues

Security for Emerging Miniaturized Wireless Biomedical Devices: Threat Modeling with Application to Case Studies

Secure Method for Software Upgrades for Implantable Medical Devices

Design and Development of Secure Data Transfer Modules in Industrial Control Systems

Machine learning for improved medical device management: A focus on defibrillator performance

A New Methodology for Information Security Risk Assessment for Medical Devices and Its Evaluation