Formally and practically verifying flow properties in industrial systems

Abstract

Industrial systems are nowadays regularly the target of cyberattacks, the most famous being Stuxnet. At the same time such systems are increasingly interconnected with other systems and insecure media such as Internet. In contrast to other IT systems, industrial systems often do not only require classical properties like data confidentiality or authentication of the communication, but have special needs due to their interaction with physical world. For example, the reordering or deletion of some commands sent to a machine can cause the system to enter an unsafe state with potentially catastrophic effects. To prevent such attacks, the integrity of the message flow is necessary. We provide a formal definition of Flow Integrity. We apply our definitions to two wellknown industrial protocols: OPC-UA and MODBUS. Using TAMARIN, a cryptographic protocol verification tool, we confirm that most of the secure modes of these protocols ensure Flow Integrity given a resilient network. However, we also identify weaknesses in a supposedly secure version of MODBUS, as well as subtleties in the handling of sequence numbers in OPC-UA. We also practically examine an OPC-UA stack named python-opcua, where some of the subtleties are not handled correctly.

Verification of Group Key Management of IEEE 802.21 Using ProVerif

“…Scyther and Tamarin Prover [12] have been also used to verify other standardized protocols such as IKEv1/v2 in IPsec [13], entity authentication protocols in ISO/IEC 9798 [14], TLS 1.3 [15], 5G-AKA [16] and smart grid authentication protocol SAv5 in IEEE 1815-2012 [17] and others. Dreier et al [26] showed verification results of industrial protocols OPC-UA and MODBUS with Tamarin Prover, and gave a modeling of sequence numbers and counters. While their analysis focuses on flow integrity, our analysis focuses on confidentiality (secrecy and strong secrecy) and authenticity that imply flow integrity.…”

Verification of Group Key Management of IEEE 802.21 using ProVerif

“…Scyther and Tamarin Prover [11] have been also used to verify other standardized protocols such as IKEv1/v2 in IPsec [12], entity authentication protocols in ISO/IEC 9798 [13], TLS 1.3 [14], 5G-AKA [15] and smart grid authentication protocol SAv5 in IEEE 1815-2012 [16] and others. Dreier et al [25] showed verification results of industrial protocols OPC-UA and MODBUS with Tamarin Prover, and gave a modeling of sequence numbers and counters. While their analysis focuses on flow integrity, our analysis focuses on confidentiality (secrecy and strong secrecy) and authenticity that imply flow integrity.…”