Security for building automation with hardware-based node authentication

Fischer, Thomas; Lesjak, Christian; Hoeller, Andrea; Steger, Christian

doi:10.1109/etfa.2017.8247567

Cited by 3 publications

(2 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Regarding the use of digital signatures as a security mechanism, in [39], there are elliptic curves with different key sizes analyzed, having the performance part of the software implementation of Elliptic Curve Digital Signature Algorithm (ECDSA) evaluated by testing it on a wireless sensor network. Furthermore, in [40], a concept for securing the smart building automation using an Infineon OPTIGA TPM as hardware security module is proposed, which includes TLS and the utilization of the ECDSA algorithm for the gateway authentication process, but no measurement related to the execution of the cryptographic functions is presented.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Cryptographic Considerations for Automation and SCADA Systems Using Trusted Platform Modules

Tidrea

Korodi

Silea

2019

Sensors

View full text Add to dashboard Cite

The increased number of cyber threats against the Supervisory Control and Data Acquisition (SCADA) and automation systems in the Industrial-Internet-of-Things (IIoT) and Industry 4.0 era has raised concerns in respect to the importance of securing critical infrastructures and manufacturing plants. The evolution towards interconnection and interoperability has expanded the vulnerabilities of these systems, especially in the context of the widely spread legacy standard protocols, by exposing the data to the outside network. After gaining access to the system data by launching a variety of attacks, an intruder can cause severe damage to the industrial process in place. Hence, this paper attempts to respond to the security issue caused by legacy structures using insecure communication protocols (e.g., Modbus TCP, DNP3, S7), presenting a different perspective focused on the capabilities of a trusted platform module (TPM). Furthermore, the intent is to assure the authenticity of the data transmitted between two entities on the same (horizontal interoperation) or different (vertical interoperation) hierarchical levels communicating through Modbus TCP protocol based on functionalities obtained by integrating trusted platform modules. From the experimental results perspective, the paper aims to show the advantages of integrating TPMs in automation/SCADA systems in terms of security. Two methods are proposed in order to assure the authenticity of the messages which are transmitted, respectively the study presents the measurements related to the increased time latency introduced due to the proposed concept.

show abstract

Section: Related Workmentioning

confidence: 99%

“…In the literature, several hardware-based security solutions were proposed along with the software security solution, such as in [40], where the TPM is used in order to create a trusted chain for the IoT devices which are part of an IoT Cloud infrastructure. Nevertheless, in this case, only a theoretical approach is illustrated.…”

Section: Related Workmentioning

confidence: 99%

Cryptographic Considerations for Automation and SCADA Systems Using Trusted Platform Modules

Tidrea

Korodi

Silea

2019

Sensors

View full text Add to dashboard Cite

show abstract

Security of Building Automation and Control Systems: Survey and future research directions

Graveto¹,

Cruz²,

Simões³

2022

Computers & Security

View full text Add to dashboard Cite

Elliptic Curve Cryptography Considerations for Securing Automation and SCADA Systems

Tidrea

Korodi

Silea

2023

Sensors

View full text Add to dashboard Cite

Securing critical infrastructures and manufacturing plants in the Industrial-Internet-Of-Things and Industry 4.0 is a challenge today due to the increased number of attacks against automation and SCADA systems. These systems were built without any security considerations in mind, so the evolution towards interconnection and interoperability makes them vulnerable in the context of exposing data to the outside network. Even though new protocols are considering built-in security, the widely spread legacy standard protocols need to be protected. Hence, this paper attempts to offer a solution for securing the legacy insecure communication protocols based on elliptic curve cryptography while fulfilling the time constraints of a real SCADA network. Elliptic curve cryptography is chosen to respond to the low memory resources available for the low level devices of a SCADA network (e.g., PLCs), and also because it can achieve the same level of security as other cryptographic algorithms using smaller sizes for the secure keys. Furthermore, the proposed security methods have the purpose of assuring that the data transmitted between entities of a SCADA and automation system are authentic and confidential. The experimental results showed good timing performance for the cryptographic operations executed on Industruino and MDUINO PLCs, demonstrating that our proposed concept is deployable for Modbus TCP communication in a real automation/SCADA network on existing devices from the industry.

show abstract

Security for building automation with hardware-based node authentication

Cited by 3 publications

References 7 publications

Cryptographic Considerations for Automation and SCADA Systems Using Trusted Platform Modules

Cryptographic Considerations for Automation and SCADA Systems Using Trusted Platform Modules

Security of Building Automation and Control Systems: Survey and future research directions

Elliptic Curve Cryptography Considerations for Securing Automation and SCADA Systems

Contact Info

Product

Resources

About