Security and SCADA protocols

5th International Topical Meeting on Nuclear Plant Instrumentation Controls, and Human Machine Interface Technology (NPIC and HMIT 2006)

Volumn 2006, Issue , 2006, Pages 560-567

  Igure, Vinay M ^a   Williams, Ronald D ^a  

^a University of Virginia   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INDUSTRIAL PROCESSES; LINTERCONNECTIVITY; PUBLIC INTERNET; SCADA COMMUNICATION PROTOCOLS;

DIGITAL CONTROL SYSTEMS; DISTRIBUTED PARAMETER CONTROL SYSTEMS; INTERNET; NETWORK SECURITY; SCADA SYSTEMS; SECURITY SYSTEMS;

NETWORK PROTOCOLS;

EID: 34047092682     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (37)

1. R. Carlson, "Sandia SCADA Program: High-Security SCADA LDRD Final Report," Sandia National Laboratories, Report SAND2002-0729, April 2002.
2. A. Risley, J. Roberts, and P. LaDow, "Electronic Security of Real-Time Protection and SCADA Communications," in Proc. of Fifth Annual Western Power Delivery Automation Conference, Spokane, WA, April 1-3 2003.
3. E. J. Byres and J. Lowe, "The Myths and Facts behind Cyber Security Risks for Industrial Control Systems," in Proc. of VDE Congress, Berlin, October 2004.
4. "The Center for SCADA Security," Sandia National Laboratories, (Web) http://www.sandia.gov/scada/faq.htm
5. D. J. Teumim, Industrial Network Security, ISA - The Instrumentation, Systems, and Automation Society, 2005.
6. M. Franz and D. Miller, "Industrial Ethernet Security: Threats and Countermeasures," in Industrial Ethernet Handbook , vol. 15, 2003.
7. P. Oman, E. Schweitzer, and J. Roberts, "Safeguarding IEDs, Substations, and SCADA Systems Against Electronic Intrusions," in Proc. of Western Power Delivery Automation Conference. 2001.
8. J. Pollet, "Developing a Solid SCADA Security Strategy," in Proc. of Second ISA/IEEE Sensors for Industry Conference . November 2002.
9. V. Igure, S. Laughter, and R. Williams, "Security Issues in SCADA Networks," Computers & Security, In Press 2006.
10. th Annual Western Protective Relay Conference, October 2002.
11. J. Stamp, J. Dillinger, W. Young, and J. DePoy, "Common Vulnerabilities in Critical Infrastructure Control Systems," Sandia National Laboratories, Report SAND2003-1772C, May 2003.
12. T. Sauter and C. Schwaiger, "Achievement of Secure Internet Access to Fieldbus Systems," Microprocessors & Microsystems, vol. 26, pp. 331-339, September 2002.
13. "NISCC Good Practice Guide on Firewall Deployment for SCADA and Process Control Networks," National Infrastructure Security Coordination Center, (Web) http://www.niscc.gov.uk/niscc/scada-en.html
14. J. Stamp, P. Campbell, J. DePoy, J. Dillinger, and W. Young, "Sustainable Security for Infrastructure SCADA," Sandia National Laboratories, Report SAND2003-4670, 2003.
15. R. Watro, D. Kong, S.-F. Cuti, C. Gardiner, C. Lynn, and P. Kruus, "TinyPK: Securing Sensor Networks with Public Key Technology," in Proc. of ACM Workshop on Security of Ad Hoc and Sensor Networks, 2004.
16. "Cryptographic Protection of SCADA Communications - Retrofitting Serial Communications," AGA Report 12-1, American Gas Association, (Web) http://www.gtiservices.org/security
17. M. Franz, "Vulnerability Testing of Industrial Network Devices," in Proc. of ISA Industrial Network Security Conference, October 2003.
18. nd USENIX Workshop on Electronic Commerce, Oakland, CA, November 18-21 1996.
19. "Digital Data Communications for Measurement and Control - Part 1: Profile Sets for Continuous and Discrete Manufacturing Relative to Fieldbus Use in Industrial Control Systems," IEC Standard 61784, 2003-05.
20. "PROFIBUS Technology and Applications System Description," Profibus International, (Web) http://www.profibus.com
21. IEC Standard 61158-1, "Part 1: Overview and guidance for the IEC 61158 series," Third Edition 2003-05.
22. IEC Standard 61158-2, "Part 2: Physical layer specification and service definition," Third Edition, 2003-05.
23. IEC Standard 61158-3, "Part 3: Data link service definition," Third Edition, 2003-05.
24. IEC Standard 61158-4, "Part 4: Data link protocol specification," Third Edition, 2003-05.
25. IEC Standard 61158-5, "Part 5: Application layer service definition," Third Edition, 2003-05.
26. IEC Standard 61158-6, "Part 6: Application layer protocol specification," Third Edition, 2003-05.
27. R. Krutz, Securing SCADA Systems,Wiley, 2005.
28. J. Thomesse, "Fieldbus Technology in Industrial Automation," Proc. of the IEEE, 93, pp. 1073-1101, June 2005.
29. D. Geer, "Security of Critical Control Systems Sparks Concern," IEEE Computer, 39 (1), pp. 20-23, Jan. 2006.
30. M. Olken, "Is it safe? Monitoring Infrastructure Security," IEEE Power and Energy Magazine, 4 (2), pp. 4-10, March-April 2006.
31. R. Schainker, J. Douglas, T. Kropp, "Electric Utility Responses to Grid Security Issues," IEEE Power and Energy Magazine, 4 (2), pp. 30-37, March-April 2006.
32. S. Mustard, "Security of Distributed Control Systems: The Concern Increases," Computing & Control Engineering Journal, 16 (6), pp. 19-24, Dec. 2005-Jan. 2006.
33. D. Dzung, M. Naedele, T. P. Von Hoff, M. Crevatin, "Security for Industrial Communication Systems," Proc. of the IEEE, 93 (6), pp.1152-1177, June 2005.
34. A. Miller, "Trends in Process Control Systems Security," IEEE Security & Privacy Magazine, 3 (5), pp.57-60, Sept.-Oct. 2005.
35. S. M. Bellovin, "Security Problems in the TCP/IP Protocol Suite," Computer Communications Review, 2(19), pp. 32-48, April 1989.
36. th Ann. Conf. of the IEEE, vol. 1, pp. 299-304, 29 Nov - 2 Dec 2001.
37. th IFAC Intl. Conf. on Fieldbus Systems and their Applications, 2001.