Intrusion Detection of Industrial Control System Based on Modbus TCP Protocol

Wang, Yusheng; Fan, Kefeng; Lai, Yingxu; Liu, Zenghui; Zhou, Ran; Yao, Xiangzhen; Li, Lin

doi:10.1109/isads.2017.29

Cited by 28 publications

(7 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [144], a new intrusion detection algorithm based on oneclass SVM was presented with advantages of fast and strong generalization ability, less support vector, simple mode, and great practical value. Moreover, A stereo depth intrusion detection system with a low rate of false positive (not exceed 0.045%) was proposed [145]. With the development of smart agriculture, agricultural production will be the novel attack target, and above intrusion detection algorithms will contribute to the security of the agricultural control system.…”

Section: Discussionmentioning

confidence: 99%

A Survey on Smart Agriculture: Development Modes, Technologies, and Security and Privacy Challenges

Yang

Shu

Chen

et al. 2021

IEEE/CAA J. Autom. Sinica

252

View full text Add to dashboard Cite

With the deep combination of both modern information technology and traditional agriculture, the era of agriculture 4.0, which takes the form of smart agriculture, has come. Smart agriculture provides solutions for agricultural intelligence and automation. However, information security issues cannot be ignored with the development of agriculture brought by modern information technology. In this paper, three typical development modes of smart agriculture (precision agriculture, facility agriculture, and order agriculture) are presented. Then, 7 key technologies and 11 key applications are derived from the above modes. Based on the above technologies and applications, 6 security and privacy countermeasures (authentication and access control, privacy-preserving, blockchain-based solutions for data integrity, cryptography and key management, physical countermeasures, and intrusion detection systems) are summarized and discussed. Moreover, the security challenges of smart agriculture are analyzed and organized into two aspects: 1) agricultural production, and 2) information technology. Most current research projects have not taken agricultural equipment as potential security threats. Therefore, we did some additional experiments based on solar insecticidal lamps Internet of Things, and the results indicate that agricultural equipment has an impact on agricultural security. Finally, more technologies (5G communication, fog computing, Internet of Everything, renewable energy management system, software defined network, virtual reality, augmented reality, and cyber security datasets for smart agriculture) are described as the future research directions of smart agriculture.

show abstract

Section: Discussionmentioning

confidence: 99%

A Survey on Smart Agriculture: Development Modes, Technologies, and Security and Privacy Challenges

Yang

Shu

Chen

et al. 2021

IEEE/CAA J. Autom. Sinica

252

View full text Add to dashboard Cite

show abstract

“…The accuracy results were 97.41% and 97.46% respectively. Yusheng et al [115] proposed an innovative two-part algorithm for intrusion detection. The rule extraction part consists of three modules.…”

Section: B Modbusmentioning

confidence: 99%

A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

Pliatsios

Sarigiannidis

Λάγκας

et al. 2020

IEEE Commun. Surv. Tutorials

189

View full text Add to dashboard Cite

Supervisory Control and Data Acquisition (SCADA) systems are the underlying monitoring and control components of critical infrastructures, such as power, telecommunication, transportation, pipelines, chemicals and manufacturing plants. Legacy SCADA systems operated on isolated networks, that made them less exposed to Internet threats. However, the increasing connection of SCADA systems to the Internet, as well as corporate networks, introduces severe security issues. Security considerations for SCADA systems are gaining higher attention, as the number of security incidents against these critical infrastructures is increasing. In this survey, we provide an overview of the general SCADA architecture, along with a detailed description of the SCADA communication protocols. Additionally, we discuss certain high-impact security incidents, objectives, and threats. Furthermore, we carry out an extensive review of the security proposals and tactics that aim to secure SCADA systems. We also discuss the state of SCADA system security. Finally, we present the current research trends and future advancements of SCADA security.

show abstract

“…Yusheng et al [32] explained about various vulnerabilities of Modbus protocol. ey proposed real-time deep inspection for Modbus TCP traffic in intrusion detection of industrial control systems based on Modbus protocol.…”

Section: Existing Related Workmentioning

confidence: 99%

Detection and Blocking of Replay, False Command, and False Access Injection Commands in SCADA Systems with Modbus Protocol

Rajesh

Satyanarayana

2021

Security and Communication Networks

View full text Add to dashboard Cite

Industrial control systems (ICS) are being used for surveillance and controlling numerous industrial process plants in national critical infrastructures. Supervisory control and data acquisition (SCADA) system is a core component in ICS systems for continuous monitoring and controlling these process plants. Legacy SCADA systems are working in isolated networks and using proprietary communication protocols which made them less exposed to cyber threats. In recent times, these ICS systems have been connected to Internet and corporate networks for data sharing and remote monitoring. They are also using open protocols and operating systems. This leads to vulnerabilities of the system to cyberattacks. Cybersecurity threats are more prevalent than ever in ICS systems. These attacks may be external or internal. Modbus is a widely deployed communication protocol for SCADA communications. There is no security in design of Modbus protocol, and it is vulnerable to numerous cyberattacks. In this paper, we worked for False Command Injection attack, False Access Injection attack, and replay attacks on Modbus protocol. Initially, a real-time SCADA testbed was set up, and we envisaged the impact of these attacks on Modbus protocol data using the testbed. In this work, we used local area network (LAN) environment only for simulating the attacks. We assumed that the attacks penetrated the LAN network. We proposed and developed (a) a method to detect replay attacks by incorporating time stamp and sequence number in Modbus communications and (b) a frame filtering module which will block unauthorized attacks like False Command Injection and False Access Injection attacks to reach programmable logic controller (PLC). Numbers of attacks were simulated and the performance of the method was measured using attack block rate (ABR). It blocked 97% of malicious Modbus transactions or attacks to reach the PLC. It protects SCADA systems from attackers, which is a core component of industrial control systems. The solution enhanced the security of SCADA systems with Modbus protocol.

show abstract

Intrusion Detection of Industrial Control System Based on Modbus TCP Protocol

Cited by 28 publications

References 5 publications

A Survey on Smart Agriculture: Development Modes, Technologies, and Security and Privacy Challenges

A Survey on Smart Agriculture: Development Modes, Technologies, and Security and Privacy Challenges

A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

Detection and Blocking of Replay, False Command, and False Access Injection Commands in SCADA Systems with Modbus Protocol

Contact Info

Product

Resources

About