The Dynamic Symmetric Four-Key-Generators System for Securing Data Transmission in the Industrial Control System

Abstract

Most of the communication protocols in the Industrial Control System (ICS) are vulnerable to cyber-attacks. Initially, the network protocol was designed for reliable performance, and thus did not incorporate data transmission security features. Therefore, ICS requires adequate data transmission security. This paper suggests improving the security of data transmission through a dynamic symmetric four-key-generators system, wherein the system anticipates cyberattacks by generating four keys before encryption. It involves four generators: a random initial key generator, a keystream generator, a key scheduling algorithm generator, and a pseudo-random number algorithm generator. In the receiver section, the system generates three keys before decryption to ensure data confidentiality and to avoid cyberattacks. The test results show that the proposed system keyspace is ≈22048 bits, meaning that the key is more secure from brute force attacks. As a result, the cipher data have a correlation value of 0.00007. The entropy value is 7.99, indicating that the cipher data is more secure. Also, speed tests show that the processing time still qualifies as realtime.

Risk Assessment Methods for Cybersecurity in Nuclear Facilities: Compliance to Regulatory Requirements

“…Communication integrates all of the aspects mentioned earlier in cybersecurity systems. Use encrypted data [23], [24].…”

Peer Review #2 of "Improvement of nuclear facilities DNP3 protocol data transmission security using super encryption BRC4 in SCADA systems (v0.2)"

“…Unfortunately, however, the process is slower and consumes more computer resources than symmetric encryption. The integration of several cryptographic methods is therefore proposed to provide efficient data security while simultaneously addressing the problem of key distribution, thereby overcoming each scheme's security weaknesses [55]. Some previous studies have utilized asymmetric cryptography; for example, Purevjav [56] and Harba [57] employed Rivest Shamir Adleman (RSA), while N. Hong [58] and Xin [59] used Elliptic Curve Cryptography (ECC).…”

Peer Review #3 of "Improvement of nuclear facilities DNP3 protocol data transmission security using super encryption BRC4 in SCADA systems (v0.2)"

“…To secure data, without compromising security, a cost-effective symmetric encryption method is often used. However, in such processes, proper key distribution is problematic [55]. An asymmetric scheme has potential.…”