Abstract:Industrial control systems (ICS) like supervisory control and data acquisition (SCADA) systems play a crucial role in monitoring and controlling various process industries in national critical infrastructures. They are connecting to internet and highly inter-connected corporate networks for sharing the field data to third party heterogeneous systems like enterprise resource planning, third party SCADA systems etc. Even though it helps to share the data for monitoring and control of systems, it also opens the doors for cyber-attacks. It needs to strengthen the cyber security of these SCADA systems. There are various components in SCADA systems which requires to build security in these components. Generally, most of the SCADA systems uses MODBUS communication protocol for scanning the PLC devices to acquire the field data. The communication protocol security is one of the main components which was little addressed. The MODBUS protocol was developed without security in mind because security aspect was not a concern in closed environments of industrial control systems. It is highly vulnerable to cyber-attacks. There are some methods already developed by scholars to implement security in MODBUS protocol, but the existing methods modified the MODBUS frame formats. Hence, they are not suitable to the existing legacy systems because they do not support interoperability between various industry manufacturer’s products. Another critical problem in existing methods is all the required security features were not implemented in a single method which would satisfy the security features like integrity, confidentiality, non-repudiation, authorization and authentication. In this paper, we designed and developed a new method by developing Secure Modbus Gateway Server and Client modules to provide secure data transfer between data acquisition servers and PLCs. In this methodology, the modules were developed using RSA and AES algorithms for achieving confidentiality and non-repudiation, SHA algorithm to provide integrity of the message. These modules also support authorization and authentication features. The time stamp in the Modbus frame was also included and transmitted to prevent replay attacks. The advantages of these modules/methodology are, it supports all required features for secure data transfer like integrity, confidentiality, non-repudiation, authorization and authentication. They also provide time stamp, frame filtering and exception response alarm triggering features. These modules also support interoperability and they can be easily installed in existing legacy systems. We measured performance metrics like attack resilience rate (ARP), attack penetration rate (APR) and overheads. This method protects the ICS system for 97% of attacks. The overhead on protocol was also calculated and it is found that 3.5% extra delay in round trip time which is very minor and can be tolerated in exchange of the important security benefits offered.

PLC and SCADA based Real Time Monitoring and Train Control System for the Metro Railways Infrastructure

PLC Based Factory Automation Interfaced with SCADA

Design and simulation of remote monitoring of the intelligent automatic control system in the production line

Design and Implementation of Intelligent Railway System

A SCADA System in a Construction Chemicals Manufacturing Plant

Innovative Integrated Solution for Monitoring and Protection of Power Supply System from Railway Infrastructure

INDUSTRIAL AUTOMATION & CONTROL TROUGH PLC AND LABVIEW

A Comprehensive Review of PLC based Intelligent Traffic Light Control System

Remote Monitoring and Controlling Electrical Devices for Industrial Application

Design and Development of Industrial Automated System using PLC-SCADA

Smart Railway Operation Aid System for Facilities With Low-Safety Requirements

Modelling and Simulation of SCADA and PLC System for Power System Protection Laboratory

A model-based machine learning to develop a PLC control system for Rumaila degassing stations

PLC and SCADA based Industrial Automated System

Design and Development of Secure Data Transfer Modules in Industrial Control Systems

Design and Implementation of Node-Red Based Open-Source SCADA Architecture for a Hybrid Power System

A water pumping control system with a programmable logic controller (PLC) and industrial wireless modules for industrial plants--an experimental setup

Efficient Web-Based SCADA System

Security issues in SCADA based industrial control systems

Robotic Railway Multi-Sensing and Profiling Unit Based on Artificial Intelligence and Data Fusion

AUTOMATION OF WATER SUPPLYING SYSTEM USING PLC