Abstract:Industrial control systems (ICS) like supervisory control and data acquisition (SCADA) systems play a crucial role in monitoring and controlling various process industries in national critical infrastructures. They are connecting to internet and highly inter-connected corporate networks for sharing the field data to third party heterogeneous systems like enterprise resource planning, third party SCADA systems etc. Even though it helps to share the data for monitoring and control of systems, it also opens the doors for cyber-attacks. It needs to strengthen the cyber security of these SCADA systems. There are various components in SCADA systems which requires to build security in these components. Generally, most of the SCADA systems uses MODBUS communication protocol for scanning the PLC devices to acquire the field data. The communication protocol security is one of the main components which was little addressed. The MODBUS protocol was developed without security in mind because security aspect was not a concern in closed environments of industrial control systems. It is highly vulnerable to cyber-attacks. There are some methods already developed by scholars to implement security in MODBUS protocol, but the existing methods modified the MODBUS frame formats. Hence, they are not suitable to the existing legacy systems because they do not support interoperability between various industry manufacturer’s products. Another critical problem in existing methods is all the required security features were not implemented in a single method which would satisfy the security features like integrity, confidentiality, non-repudiation, authorization and authentication. In this paper, we designed and developed a new method by developing Secure Modbus Gateway Server and Client modules to provide secure data transfer between data acquisition servers and PLCs. In this methodology, the modules were developed using RSA and AES algorithms for achieving confidentiality and non-repudiation, SHA algorithm to provide integrity of the message. These modules also support authorization and authentication features. The time stamp in the Modbus frame was also included and transmitted to prevent replay attacks. The advantages of these modules/methodology are, it supports all required features for secure data transfer like integrity, confidentiality, non-repudiation, authorization and authentication. They also provide time stamp, frame filtering and exception response alarm triggering features. These modules also support interoperability and they can be easily installed in existing legacy systems. We measured performance metrics like attack resilience rate (ARP), attack penetration rate (APR) and overheads. This method protects the ICS system for 97% of attacks. The overhead on protocol was also calculated and it is found that 3.5% extra delay in round trip time which is very minor and can be tolerated in exchange of the important security benefits offered.

DISENO E IMPLEMENTACION DE UNA APLICACION DE PRUEBAS DE COMUNICACION PARA PROTOCOLO MODBUS SERIAL ASCLL, SERIAL RTU Y TCP DE LIBRE DISTRIBUCION

Modbus Extension Server Implementation for BIoT-Enabled Smart Switch Embedded System Device

Demonstration of Modbus Protocol for Robot Communication Using C#

A Role-Based Access Control Model in Modbus SCADA Systems. A Centralized Model Approach

The IRCBus Communication Protocol Construction Design and Realization for Distributed Control System

Design And Implementation Of The Universal Servo Control Algorithm Verification System Based On High-Speed Communication Fieldbus

Design and Implementation of the Instrument in Process Supervisory Level Based on Modbus Protocol

Design and Implementation of Modbus Protocol for Intelligent Building Security

Inter-communication between Programmable Logic Controllers using IoT technologies: A Modbus RTU/MQTT Approach

Parameter-Based Mechanism for Unifying User Interaction, Applications and Communication Protocols

A Novel Modbus RTU-based Communication System for Adjustable Speed Drives

Application of Mobus Protocol to Data Collection Instrument

Design of Communication Among Vision System, PLC and Industrial Robot based on Modbus-TCP protocol

Serial Communication Design of Industrial Control System Based on Visual Basic6.0 and MX Software Package

An event-driven link-level simulator for validation of AFDX and Ethernet avionics networks

Design of an Energy Consumption Classification System Based on MODBUS Protocol by C#

An Implementation of SCADA Network Security Testbed

Novel Networked Remote Laboratory Architecture for Open Connectivity Based on PLC-OPC-LabVIEW-EJS Integration. Application in Remote Fuzzy Control and Sensors Data Acquisition

An Event-Driven Link-Level Simulator for the Validation of AFDX and Ethernet Avionics Networks

A Wireless Ad Hoc Network Communication Platform and Data Transmission Strategies for Multi-Bus Instruments

Design and Development of Secure Data Transfer Modules in Industrial Control Systems