A Trust System Architecture for SCADA Network Security

Real Time MODBUS Transmissions and Cryptography Security Designs and Enhancements of Protocol Sensitive Information

“…In conclusion, the approximate security lies in the range of 60 to 80 percent, which is comparatively low relative to the current research, which computed security results of 95 to 98 percent. Therefore, this study and others [25,[29][30][31][35][36][37][38][39][40]59,[91][92][93][94][95][96][97][98]101,102] conclude that security in any system should be significantly improved if a security mechanism can be a part of a system rather depending on an end-to-end approach. However, security developments are quite difficult to design and test inside of the protocol and the required depth knowledge of the protocol and other implementation details except security performance are more accurate and remarkable in these scenarios.…”

“…During transmission, the message is treated with security methods (or cryptography algorithms) to keep the message (or payload) secure from un-authorized users (or attackers) [23][24][25][26][27][28][29][30][31][32]59,99,100]. However, these security developments [25,[29][30][31][35][36][37][38][39][40] are usually end-to-end based, meaning that security developments are not part of a SCADA system and its protocols, but rather that security is treated and computed as part of external component sources. The computed results are far away from our computed results.…”

“…There are many studies [22,25,[29][30][31][35][36][37][38][39][40][91][92][93][94][95][96][97][98] that have been deployed to secure communication for MODBUS protocol communication as well as SCADA/protocol communication. Most of these provide adequate security computation and performance, but cryptography based mechanisms can be considered to be the best approaches for computer networks (such as traditional, and real time networks).…”

“…Therefore, the details of the security analysis indicate that cryptography-based mechanisms can provide security for the SCADA/MODBUS protocol. However, existing developments [22,[35][36][37][38][39][40]69,[91][92][93][94][95][96][97][98][103][104][105][106][107][108][109] have not taken into account SCADA/MODBUS communications due to end-to-end limitations. Therefore, the proposed research identifies a new development in place of an end-to-end scheme.…”

Trust System Architecture for Securing GOOSE Communication in IEC 61850 Substation Network

“…The Trust System proposed by Coates et al is a communication security device, which is combined together with firewall and intrusion detection abilities, designed for use with strict real-time requirements network systems [8]. The concept of this proposed trust system is to take common standalone security products (i.e., firewalls, IDSs, router ACLs, etc.)…”