Abstract:Industrial control systems (ICS) like supervisory control and data acquisition (SCADA) systems play a crucial role in monitoring and controlling various process industries in national critical infrastructures. They are connecting to internet and highly inter-connected corporate networks for sharing the field data to third party heterogeneous systems like enterprise resource planning, third party SCADA systems etc. Even though it helps to share the data for monitoring and control of systems, it also opens the doors for cyber-attacks. It needs to strengthen the cyber security of these SCADA systems. There are various components in SCADA systems which requires to build security in these components. Generally, most of the SCADA systems uses MODBUS communication protocol for scanning the PLC devices to acquire the field data. The communication protocol security is one of the main components which was little addressed. The MODBUS protocol was developed without security in mind because security aspect was not a concern in closed environments of industrial control systems. It is highly vulnerable to cyber-attacks. There are some methods already developed by scholars to implement security in MODBUS protocol, but the existing methods modified the MODBUS frame formats. Hence, they are not suitable to the existing legacy systems because they do not support interoperability between various industry manufacturer’s products. Another critical problem in existing methods is all the required security features were not implemented in a single method which would satisfy the security features like integrity, confidentiality, non-repudiation, authorization and authentication. In this paper, we designed and developed a new method by developing Secure Modbus Gateway Server and Client modules to provide secure data transfer between data acquisition servers and PLCs. In this methodology, the modules were developed using RSA and AES algorithms for achieving confidentiality and non-repudiation, SHA algorithm to provide integrity of the message. These modules also support authorization and authentication features. The time stamp in the Modbus frame was also included and transmitted to prevent replay attacks. The advantages of these modules/methodology are, it supports all required features for secure data transfer like integrity, confidentiality, non-repudiation, authorization and authentication. They also provide time stamp, frame filtering and exception response alarm triggering features. These modules also support interoperability and they can be easily installed in existing legacy systems. We measured performance metrics like attack resilience rate (ARP), attack penetration rate (APR) and overheads. This method protects the ICS system for 97% of attacks. The overhead on protocol was also calculated and it is found that 3.5% extra delay in round trip time which is very minor and can be tolerated in exchange of the important security benefits offered.

Demo Abstract: an Industrial Control System Testbed for the Encrypted Controller

Demo Abstract: A HIL Emulator-Based Cyber Security Testbed for DC Microgrids

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

LQG Control under Denial-of-Service Attacks: an Experimental Study

Exploration of Quantum Cryptography Security Applications for Industrial Control Systems

An Implementation of SCADA Network Security Testbed

A code-driven tutorial on encrypted control: From pioneering realizations to modern implementations

Real-time controller hardware-in-the-loop co-simulation testbed for cooperative control strategy for cyber-physical power system

An Experimental Security Analysis of an Industrial Robot Controller

The Trade-off Between Security and Performance of Encrypted Networked Control Systems.

Cyber-Physical Testbed for Power System Wide-Area Measurement-Based Control Using Open-Source Software

Construction of Integrated Protection System for Industrial Control System Based on Trusted Computing

Industry Trusted Network Communication Based on Quantum Encryption

A Secure Revocable Fine-Grained Access Control and Data Sharing Scheme for SCADA in IIoT Systems

SePanner: Analyzing Semantics of Controller Variables in Industrial Control Systems Based on Network Traffic

Fuzzing proprietary protocols of programmable controllers to find vulnerabilities that affect physical control

Stealthy Attack Against Redundant Controller Architecture of Industrial Cyber-Physical System.

Optimizing encrypted control algorithms for real-time secure control

A Simulation Environment for SCADA Security Analysis and Assessment

Design and Development of Secure Data Transfer Modules in Industrial Control Systems

Security of Cyber-Physical Systems. From Theory to Testbeds and Validation