Advanced key-management architecture for secure SCADA communications

IEEE Transactions on Power Delivery

Volumn 24, Issue 3, 2009, Pages 1154-1163

  Choi, Donghyun ^a   Kim, Hakman ^b   Won, Dongho ^a   Kim, Seungjoo ^a  

^a Sungkyunkwan University   (South Korea)

^b SolarLight Ltd   (South Korea)

Author keywords

Key management; Power system security; Supervisory control and data acquisition (SCADA) systems

Indexed keywords

HIGH-POWER; KEY MANAGEMENT; LOW POWER; MESSAGE BROADCASTING; NATIONAL INFRASTRUCTURE; OPEN NETWORK; OPERATING ENVIRONMENT; PERFORMANCE BOTTLENECKS; POWER SYSTEM SECURITY; SECURE COMMUNICATIONS; SECURITY REQUIREMENTS; SUPERVISORY CONTROL; SUPERVISORY CONTROL AND DATA-ACQUISITION (SCADA) SYSTEMS;

ELECTRIC POWER TRANSMISSION NETWORKS; MERGERS AND ACQUISITIONS; NETWORK PROTOCOLS; NETWORK SECURITY; POWER TRANSMISSION;

SCADA SYSTEMS;

EID: 67650661171     PISSN: 08858977     EISSN: None     Source Type: Journal    
DOI: 10.1109/TPWRD.2008.2005683     Document Type: Article

References (21)

1. C. Ken, "A DNP3 protocol primer," DNP Users Group, Mar. 2005. [Online]. Available: http://www.dnp.org/About/DNP3%20Primer%20Rev%20A.pdf
2. "Critical infrastructure protection: Challenge and efforts to secure control systems," GAO, Rep. no. GAO-04-354, 2004. [Online]. Available: http://www.gao.gov
3. M. I. Vinay, A. L. Sean, and D. W. Ronald, "Security issues in SCADA networks," Comput. Security, vol. 25, pp. 498-506, 2006.
4. "Security technologies for industrial automation and control systems," Instrum. Syst. Autom. Soc., Research Triangle Park, NC, ANSI/ISA-TR99.00.01-2007, 2007.
5. "Integrating electronic security into the manufacturing and control systems environment," Instrum. Syst. Autom. Soc., Research Triangle Park, NC, ANSI/ISA-TR99.00.02-2004, 2007.
6. "System protection profile - industrial control systems v1.0," Nat. Inst. Standards Technol., Gaithersburg, MD, 2004. [Online]. Available: http://www.isd.mel.nist.gov/projects/processcontrol/SPP-ICSv1.0.pdf
7. K. Stouffer, J. Falco, and K. Kent, "Guide to supervisory control and data acquisition (SCADA) and industrial control systems security," Nat. Inst. Standards Technol., Gaithersburg, MD, Tech rep. special publ. 800-82, Sep. 2006.
8. API 1164: Pipeline SCADA Security. Washington, DC: American Petroleum Inst., 2004.
9. "Cryptographic protection of SCADA communications Part 1: Background, policies and test plan. Amer. Gas Assoc., 2005. [Online]. Available: http://www.gtiservice.org/security/
10. "Cryptographic protection of SCADA communications; Part 2: Retrofit link encryption for asynchronous serial communications," American Gas Assoc., 2005., AGA Rep. (Part 2), Draft.
11. B. Cheryl, G. Donald, N. Willian, and T. Mark, Key management for SCADA 2002. [Online]. Available: http://www.sandia.org/scada/documnets/ 013252.pdf
12. D. Robert, B. Colin, D. Ed, and M. G. N. Juan, "SKMA a key management architecture for SCADA systems," in Proc. 4th Australasian Information Security Workshop, 2006, vol. 54, pp. 138-192.
13. Information Technology - Security Techniques - Key Management - Part 2: Mechanisms Using Symmetric Techniques, ISO/IEC 11770-2 Int. Std., 1996.
14. K.-C. Chan and S.-H. G. Chan, "Key management approaches to offer data confidentiality for secure multicast," IEEE Netw., vol. 17, no. 5, pp. 30-39, Sep./Oct. 2003.
15. C. K.Wong, H. Gouda, and S. S. Lam, "Secure group communications using key graphs," in Proc. ACMSIGCOMM Conf. Applications, Technologies, Architectures, and Protocols for Computer Communication, 1998, pp. 68-79.
16. H. Harney and E. Harder, "Logical key hierachy protocol," Internet Eng. Task Force, 1999. [Online]. Available: http://tools.ietf.org/html/draft-harney-sparta-lkhp-sec-00
17. M. Waldvogel, "The Versakey framework: Versatile group key management," IEEE J. Sel. Areas Commun., vol. 17, no. 9, pp. 1614-1631, Sep. 1999.
18. R. D. Pietro, L. V. Mancini, and S. Jajodia, "Efficient and secure keys management for wireless mobile communications," in Proc. 2nd ACM Int. Workshop Principles of Mobile Computing, 2002, pp. 66-73.
19. S. Mittra, "Iolus: A framework for scalable secure multicasting," Proc. ACM SIGCOMM, pp. 277-88, 1997.
20. T. Hardjono, B. Cain, and B. Doraswamy, "A framework for group key management for multicast security," 2000, IETF Internet Draft. [Online]. Available: http://tools.ietf.org/html/ draft-ietf-ipsec-gkm-framework-03.txt
21. A. Perrig, D. Song, and J. D. Tygar, "ELK, a new protocol for efficient large group key distribution," in Proc. IEEE Symp. Security and Privacy, 2001, pp. 247-262.