Abstract:Industrial control systems (ICS) like supervisory control and data acquisition (SCADA) systems play a crucial role in monitoring and controlling various process industries in national critical infrastructures. They are connecting to internet and highly inter-connected corporate networks for sharing the field data to third party heterogeneous systems like enterprise resource planning, third party SCADA systems etc. Even though it helps to share the data for monitoring and control of systems, it also opens the doors for cyber-attacks. It needs to strengthen the cyber security of these SCADA systems. There are various components in SCADA systems which requires to build security in these components. Generally, most of the SCADA systems uses MODBUS communication protocol for scanning the PLC devices to acquire the field data. The communication protocol security is one of the main components which was little addressed. The MODBUS protocol was developed without security in mind because security aspect was not a concern in closed environments of industrial control systems. It is highly vulnerable to cyber-attacks. There are some methods already developed by scholars to implement security in MODBUS protocol, but the existing methods modified the MODBUS frame formats. Hence, they are not suitable to the existing legacy systems because they do not support interoperability between various industry manufacturer’s products. Another critical problem in existing methods is all the required security features were not implemented in a single method which would satisfy the security features like integrity, confidentiality, non-repudiation, authorization and authentication. In this paper, we designed and developed a new method by developing Secure Modbus Gateway Server and Client modules to provide secure data transfer between data acquisition servers and PLCs. In this methodology, the modules were developed using RSA and AES algorithms for achieving confidentiality and non-repudiation, SHA algorithm to provide integrity of the message. These modules also support authorization and authentication features. The time stamp in the Modbus frame was also included and transmitted to prevent replay attacks. The advantages of these modules/methodology are, it supports all required features for secure data transfer like integrity, confidentiality, non-repudiation, authorization and authentication. They also provide time stamp, frame filtering and exception response alarm triggering features. These modules also support interoperability and they can be easily installed in existing legacy systems. We measured performance metrics like attack resilience rate (ARP), attack penetration rate (APR) and overheads. This method protects the ICS system for 97% of attacks. The overhead on protocol was also calculated and it is found that 3.5% extra delay in round trip time which is very minor and can be tolerated in exchange of the important security benefits offered.

State Compression and Quantitative Assessment Model for Assessing Security Risks in the Oil and Gas Transmission Systems

Intrusion Detection Model of SCADA Using Graphical Features

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Cyber security risk assessment for SCADA and DCS networks

Quantitative Risk Assessment of Threats on SCADA Systems Using Attack Countermeasure Tree

An Intelligent Security Defensive Model of SCADA Based on Multi-Agent in Oil and Gas Fields

SCADA Vulnerabilities and Attacks: A Review of the State-of-the-Art and Open Issues

Quantitative Vulnerability Assessment of Cyber Security for Distribution Automation Systems

sSCADA: Securing SCADA Infrastructure Communications

A cyber-physical model for SCADA system and its intrusion detection

Assessment of Security Index for SCADA Systems in Smart Grids.

Architecture and security of SCADA systems: A review

Identification of ICS Security Risks Toward the Analysis of Packet Interaction Characteristics Using State Sequence Matching Based on SF-FSM

ANDVI: Automated Network Device and Vulnerability Identification in SCADA/ICS by Passive Monitoring

Distributed Dynamic Security Assessment for Modern Power System Operational Situational Awareness

Security in Supervisory Control and Data Acquisition (SCADA) based Industrial Control Systems: Challenges and Solutions

Combining ensemble methods and social network metrics for improving accuracy of OCSVM on intrusion detection in SCADA systems

Design and Development of Secure Data Transfer Modules in Industrial Control Systems

A Quantum-Based Signcryption for Supervisory Control and Data Acquisition (SCADA) Networks

Real-Time Effective Monitoring and Control in Oil and Gas Industry Using SCADA Technology as a Management Tool

A Classy Multifacet Clustering and Fused Optimization Based Classification Methodologies for SCADA Security