Formal vulnerability analysis of a security system for remote fieldbus access

IEEE Transactions on Industrial Informatics

Volumn 7, Issue 1, 2011, Pages 30-40

  Cheminod, Manuel ^a   Pironti, Alfredo ^b   Sisto, Riccardo ^b  

^a Istituto Di Elettronica E Di Ingegneria Dell'informazione E Delle Telecomunicazioni Turin   (Italy)

^b POLITECNICO DI TORINO   (Italy)

Author keywords

Computer security; cryptographic protocols; formal specifications; formal verification; industrial control; supervisory control and data acquisition (SCADA) systems

Indexed keywords

COMPUTER SECURITY; CRYPTOGRAPHIC PROTOCOLS; FORMAL SPECIFICATIONS; FORMAL VERIFICATIONS; INDUSTRIAL CONTROL; SUPERVISORY CONTROL AND DATA ACQUISITION SYSTEMS;

CRYPTOGRAPHY; INTERNET PROTOCOLS; NETWORK ARCHITECTURE; NETWORK SECURITY; SCADA SYSTEMS; SECURITY SYSTEMS; SPECIFICATIONS;

COMPUTER CONTROL SYSTEMS;

EID: 79951577827     PISSN: 15513203     EISSN: None     Source Type: Journal    
DOI: 10.1109/TII.2010.2099233     Document Type: Article

References (25)

1. M. S. DePriest, "Network security considerations in TCP/IP-based manufacturing automation," ISA Transactions, vol. 36, no. 1, pp. 37-48, 1997. (Pubitemid 127756622)
2. The Industrial Information Technology Handbook, R. Zurawski, Ed.. Boca Raton, FL: CRC Press, 2005.
3. V. M. Igure, S. A. Laughter, and R. D. Williams, "Security issues in SCADA networks," Comput. Security, vol. 25, no. 7, pp. 498-506, 2006. (Pubitemid 44637241)
4. M. Brändle and M. Naedele, "Security for process control systems: An overview," IEEE Security and Privacy, vol. 6, no. 6, pp. 24-29, 2008.
5. A. Miller, "Trends in process control systems security," IEEE Security and Privacy, vol. 3, no. 5, pp. 57-60, 2005. (Pubitemid 41560446)
6. P. Ralston, J. Graham, and J. Hieb, "Cyber security risk assessment for SCADA and DCS networks," ISA Transactions, vol. 46, no. 4, pp. 583-594, 2007. (Pubitemid 47284077)
7. L. Piètre-Cambacédès and P. Sitbon, "Cryptographic key management for SCADA systems-issues and perspectives," in Int. Conf. Information Security and Assurance, 2008, pp. 156-161.
8. NIST, "SP 800-82: Guide to Industrial Control Systems (ICS) Security," Sep. 2008, final public draft.
9. M. R. Albrecht, K. G. Paterson, and G. J. Watson, "Plaintext recovery attacks against SSH," in Proc. IEEE Symp. Security and Privacy, 2009, pp. 16-26.
10. V. Klíma, O. Pokorny, and T. Rosa, "Attacking RSA-based sessions in SSL/TLS," Cryptographic Hardware and Embedded Systems, pp. 426-440, 2003.
11. B. Blanchet, "An efficient cryptographic protocol verifier based on Prolog rules," in Computer Security Foundations Workshop, 2001, pp. 82-96. (Pubitemid 32877779)
12. M. Cheminod, I. Bertolotti, L. Durante, P. Maggi, D. Pozza, R. Sisto, and A.Valenzano, "Detecting chains of vulnerabilities in industrial networks," IEEE Trans. Ind. Informat., vol. 5, no. 2, pp. 181-193, May 2009.
13. T. Sauter and C. Schwaiger, "Achievement of secure Internet access to fieldbus systems," Microprocessors and Microsystems, vol. 26, no. 7, pp. 331-339, 2002. (Pubitemid 34862748)
14. J. Edmonds, M. Papa, and S. Shenoi, "Security analysis of multilayer SCADA protocols," Critical Infrastructure Protection, pp. 205-221, 2007.
15. B. Dutertre, "Formal modeling and analysis of the modbus protocol," Critical Infrastructure Protection, pp. 189-204, 2007.
16. AGA, "Report no. 12, part 1: Cryptographic protection of SCADA communications: Background, policies and test plan," Mar. 2006.
17. M. Abadi and C. Fournet, "Mobile values, new names and secure communication," ACM Special Interest Group on Programming Languages, vol. 36, no. 3, pp. 104-115, 2001.
18. D. Dolev and A. C.-C. Yao, "On the security of public key protocols," IEEE Trans. Inform. Theory, vol. 29, pp. 198-207, 1983.
19. N. A. Durgin, P. Lincoln, and J. C. Mitchell, "Multiset rewriting and the complexity of bounded security protocols," J. Comput. Security, vol. 12, no. 2, pp. 247-311, 2004.
20. K. Bhargavan, C. Fournet, and A. D. Gordon, "Verified reference implementations of WS-security protocols," Web Services and Formal Methods, pp. 88-106, 2006. (Pubitemid 44849753)
21. M. Abadi, B. Blanchet, and C. Fournet, "Just fast keying in the Pi calculus," in Proc. Eur. Symp. Program., 2004, pp. 340-354.
22. A. Treytl, T. Sauter, and C. Schwaiger, "Security measures for industrial fieldbus systems-state of the art and solutions for IP-based approaches," in Int. Workshop on Factory Commun. Syst., 2004, pp. 201-209. (Pubitemid 40575220)
23. M. Cheminod, A. Pironti, and R. Sisto, "Online resources about formal analysis of fieldbus systems," 2010. [Online]. Available: http://staff. polito.it/riccardo.sisto/fieldbus/
24. G. Lowe, "A hierarchy of authentication specifications," in Computer Security Foundations Workshop, 1997, pp. 31-43.
25. M. Abadi and B. Blanchet, "Computer-assisted verification of a protocol for certified email," Sci. Comput. Program., vol. 58, no. 1-2, pp. 3-27, 2005. (Pubitemid 41261375)