Abstract:In Industrial systems, Supervisory control and data acquisition (SCADA) system, the pseudo-transport layer of the distributed network protocol (DNP3) performs the functions of the transport layer and network layer of the open systems interconnection (OSI) model. This study used a simulation design of water pumping system, in-which the network nodes are directly and wirelessly connected with sensors, and are monitored by the main controller, as part of the wireless SCADA system. This study also intends to focus on the security issues inherent in the pseudo-transport layer of the DNP3 protocol. During disassembly and reassembling processes, the pseudo-transport layer keeps track of the bytes sequence. However, no mechanism is available that can verify the message or maintain the integrity of the bytes in the bytes received/transmitted from/to the data link layer or in the send/respond from the main controller/sensors. To properly and sequentially keep track of the bytes, a mechanism is required that can perform verification while bytes are received/transmitted from/to the lower layer of the DNP3 protocol or the send/respond to/from field sensors. For security and byte verification purposes, a mechanism needs to be proposed for the pseudo-transport layer, by employing cryptography algorithm. A dynamic choice security buffer (SB) is designed and employed during the security development. To achieve the desired goals of the proposed study, a pseudo-transport layer stack model is designed using the DNP3 protocol open library and the security is deployed and tested, without changing the original design.

Encryption of Sensitive Data Flow Information in Hybrid Networks with P4

Network Coding Based Privacy Preservation Against Traffic Analysis in Multi-Hop Wireless Networks

dh-aes-p4: On-premise encryption and in-band key-exchange in P4 fully programmable data planes

A Review of P4 Programmable Data Planes for Network Security

Intelligent Network Layer for Cyber-Physical Systems Security

High Performance Network Metadata Extraction Using P4 for ML-based Intrusion Detection Systems

P4-NSAF: Defending IPv6 Networks Against ICMPv6 DoS and DDoS Attacks with P4

P4Control: Line-Rate Cross-Host Attack Prevention via In-Network Information Flow Control Enabled by Programmable Switches and eBPF

Graph Layer Security: Encrypting Information via Common Networked Physics

Anti-DDoS Attacks Strategy of SDN Data Plane with Data Augmentation Based on P4

GuardBox: A High-Performance Middlebox Providing Confidentiality and Integrity for Packets

Physical Layer Encryption for Industrial Ethernet in Gigabit Optical Links

A Secure, Intelligent, and Smart-Sensing Approach for Industrial System Automation and Transmission over Unsecured Wireless Networks

A P4-Based Approach to Traffic Isolation and Bandwidth Management for 5G Network Slicing

Hybrid Internet Traffic Classification Technique

Cross-layer detection and defence mechanism against DDoS and DRDoS attacks in software-defined networks using P4 switches

P4-IPsec: Site-to-Site and Host-to-Site VPN With IPsec in P4-Based SDN

Programmable In-Network Obfuscation of Traffic

P4-MACsec: Dynamic Topology Monitoring and Data Layer Protection with MACsec in P4-SDN

Secure sharing method of network data transmission based on multi-layer encryption algorithm

Extracting TCPIP Headers at High Speed for the Anonymized Network Traffic Graph Challenge