Cryptographic Key Management for SCADA Systems-Issues and Perspectives

Research on trusted Modbus/TCP protocol of SCADA system based on digital envelope technology

“…Step (5): After the client receives the message "rdata", as in step (3), it gets "redate" on the basis of the principle of digital envelope technology, hashes "redata" using the SM3 cipher algorithm, and gets redigest2. It is demonstrated that the communication process was not interfered with if redigest1 and redigest2 are identical; If redigest1 differs from redigest2, the server is considered unreliable and the communication process has been interrupted.…”

“…Modbus/TCP protocol is an enlarged protocol of Modbus, the mainstream fieldbus protocol used all around in ICS systems. Nevertheless, the design of this protocol give importance on the efficiency overutilization, and does not fully think about the security, all in all it is authication deficit, encryption and integrity authentication [3][4][5][6] . This allows attackers to attack Modbus/TCP network in ICS system via TCP/IP network, and steal crucial data information in ICS system by imitating or tampering with servers or clients.…”

Security Analysis and Enhancement of INTERBUS Protocol in ICS Based on Colored Petri Net

“…These vulnerabilities can potentially inflict severe disruptions on the controlled objects. Consequently, safeguarding interconnected control networks from unauthorized access has emerged as a pivotal area of research [3][4][5][6][7][8][9], precipitating the development of dedicated security protocols [10]. For instance, traditional bus protocols like Modbus, Profibus, and CAN have been identified as particularly susceptible to cyber-attacks, especially where programmable logic controllers (PLCs) are accessed from within the control network [11].…”

Anomaly detection in SCADA systems : a network based approach

“…Given the limited resources of devices in the field network, a challenging task is to address the conflict between the real-time requirements of these systems and the additional delay caused by encryption algorithms [149,150,143,121,39]. A common solution to circumvent this limitation is to encrypt the communication link between the field and control networks using a "Bump-In-The-Wire (BITW)" [149,150,143].…”

“…The "bump-in-the-wire" approach A related problem deals with the management of cryptographic keys. Some of the challenges in this area are discussed by Pi and Sitbon [121]. Choi et al [39] provide a SCADA specific solution that supports message broadcasting and secure communications.…”