A prototype of a secure autonomous bootstrap mechanism for control networks

Proceedings - 2006 International Symposium on Applications and the Internet, SAINT 2006

Volumn 2006, Issue , 2006, Pages 56-62

  Okabe, Nobuo ^a   Sakane, Shoichi ^a   Ishiyama, Masahiro ^b   Inoue, Atsushi ^b   Esaki, Hiroshi ^c  

^a YOKOGAWA ELECTRIC CORPORATION   (Japan)

^b TOSHIBA CORPORATION   (Japan)

^c UNIVERSITY OF TOKYO   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

AUTONOMOUS BOOTSTRAP; DEVICE COMMUNICATION; ISOLATED NETWORKS; PROCESS AUTOMATION;

AUTOMATION; COMPUTATIONAL COMPLEXITY; COMPUTER NETWORKS; COMPUTER SYSTEMS; INTERNET; NETWORK PROTOCOLS; SECURITY OF DATA;

SOFTWARE PROTOTYPING;

EID: 33749377150     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAINT.2006.6     Document Type: Conference Paper

References (20)

1. ASHRAE. ANSI/ASHRAE Standard 135-1995, BACnet A Data Communication Protocol for Building Automation and Control Networks, 1995.
2. E. Byres. Plant network security: Can't happen at your site? inTech, ISA, Feb. 2002. http://www.isa.org/Content/ContentGroups/InTech2/Features/20023/February6/ Cant_happen_at_your_site_.htm.
3. EIA. EIA/CEA-709.1-B, Control Network Protocol Specification, 2002.
4. Fieldbus Foundation. FF-581-13, FOUNDATION Specification: System Architecture, 2003.
5. J. Gerston. Water and Wastewater Utilities Enhance System Security. In Texas Water Resources, volume 27. Texas Water Resources Institute, Dec. 2002.
6. D. Harkins and D. Carrel. The Internet Key Exchange (IKE). RFC2409, 1998.
7. D. G. Holmberg. BACnet Wide Area Network Security Threat Assessment. NISTIR 7009, NIST, Jul. 2003.
8. A. Inoue, M. Ishiyama, et al. A Secured Autonomous Bootstrap Mechanism for Control Networks. Annual Review of Communications, Volume 57, International Engineering Consortium, Nov. 2004.
9. C. Kaufman, R. Perlman, and M. Speciner. Network Security: Private Communication in a Public World, chapter 10. Prentice Hall, 1995.
10. S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. RFC2401, 1998.
11. J. Kohl and C. Neuman. The Kerberos Network Authentication Service (V5). RFC1510, 1993.
12. K. Kubo, J. Murakami, et al. Hybrid Peer-to-Peer System for Network Monitoring of Field Devices. In SICE Annual Conference 2003 in Fukui, Aug. 2003.
13. MODBUS.ORG. Modbus Application protocol V1.0, 2002.
14. N. Okabe, S. Sakane, et al. Security Architecture for Control Networks using IPsec and KINK. In SAINT2005, The 2005 International Symposium on Applications and the Internet, Jan. 2005.
15. K. Poulsen. Slammer worm crashed Ohio nuke plant network. SecurityFocus, Aug. 2003. http://www.securityfocus.com/news/6767.
16. PROFIBUS International. IEC 61158, Digital Data Communication for Measurement and Control - Fieldbus for Use in Industrial Control Systems, 1999.
17. D. Robin. IBACnet Security Messages. SPPC 135 WG Document DR-029-6, BACnet committee, Mar. 2004.
18. S. Sakane, K. Kamada, et al. Kerberized Internet Negotiation of Keys (KINK), draft-ietf-kink-kink-07.txt, 2005.
19. UPnP Forum. UPnP Device Architecture 1.0, Version 1.0.1, 2003.
20. J. Zachary, R. Brooks, et al. Secure Integration of Building Network into the Global Internet. NIST GCR 02-837, NIST, Oct. 2002.