An event buffer flooding attack in DNP3 controlled SCADA systems

Proceedings - Winter Simulation Conference

Volumn , Issue , 2011, Pages 2614-2626

  Jin, Dong ^a   Nicol, David M ^a   Yan, Guanhua ^b  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b LOS ALAMOS NATIONAL LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONTROL CENTER; DISCRETE TIME MARKOV CHAINS; DNP3 PROTOCOL; ELECTRICAL POWER; FLOODING ATTACKS; LOCAL REGION; SIMULATION MODEL; STATE INFORMATION; SYSTEM HARDWARE;

COMPUTER SIMULATION; MARKOV PROCESSES;

SCADA SYSTEMS;

EID: 84858047755     PISSN: 08917736     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WSC.2011.6147969     Document Type: Conference Paper

References (22)

1. Digital Bond 2010. "DNP3 IDS Signatures". http://www. digitalbond.com.
2. Bowen III, C., T. Buennemeyer, and R. Thomas. 2005. "A Plan for SCADA Security Employing Best Practices and Client Puzzles to Deter DoS Attacks". presented at Working Together: R&D Partnerships in Homeland Security.
3. DNP Users Group 2007. DNP3 Specification Application Layer Volume 2. DNP Users Group.
4. DNP Users Group 2010, March. "DNP3 Specification, Secure Authentication, Supplement to Volume 2". http://www.dnp.org/Modules/ Library/Document.aspx.
5. East, S., J. Butts, M. Papa, and S. Shenoi. 2009. "A Taxonomy of Attacks on the DNP3 Protocol". Critical Infrastructure Protection III 311:67-81.
6. EPRI 2008. "DNP Security Development, Evaluation and Testing Project Opportunity". http://mydocs.epri.com/docs/public/000000000001016988.pdf.
7. Faruk, O. 2008. "Testing & Exploring Vulnerabilities of the Applications Implementing DNP3 Protocol".
8. Fernandez, J., and A. Fernandez. 2005. "SCADA systems: vulnerabilities and remediation". Journal of Computing Sciences in Colleges 20.
9. Graham, J., and S. Patel. 2004. "Security considerations in SCADA communication protocols". Technical Report TR-ISRL-04-01, Intelligent Systems Research Laboratory.
10. Guo, C. 2001. "SRR: An O(1) time complexity packet scheduler for flows in multi-service packet networks". In ACM SIGCOMM.
11. Khurana, H., R. Bobba, T. Yardley, P. Agarwal, and E. Heine. 2010. "Design Principles for Power Grid Cyber-Infrastructure Authentication Protocols". In HICSS, 1-10.
12. Majdalawieh, M., F. Parisi-Presicce, and D. Wijesekera. 2006. "DNPSec: Distributed Network Protocol Version 3 (DNP3) Security Framework". Advances in Computer, Information, and Systems Sciences, and Engineering:227-234.
13. Mander, T., R. Cheung, and F. Nabhani. 2010. "Power system DNP3 data object security using data sets". Computers & Security 29 (4): 487-500.
14. Meyer, J., A. Movaghar, and W. Sanders. 1985. "Stochastic activity networks: Structure, behavior, and application". In International Workshop on Timed Petri Nets.
15. Mirkovic, J., and P. Reiher. 2004. "A taxonomy of DDoS attack and DDoS defense mechanisms". ACM SIGCOMM Computer Communication Review 34 (2): 39-53.
16. Möbius 2010. "The Möbius Manual". www.mobius.illinois.edu.
17. Piètre-Cambacédès, L., and P. Sitbon. 2008. "Cryptographic key management for SCADA systems-issues and perspectives". In Information Security and Assurance.
18. PNNL 2010. "Looking Back at the August 2003 Blackout". http://eioc.pnl.gov/research/2003blackout.stm.
19. Ralston, P., J. Graham, and J. Hieb. 2007. "Cyber security risk assessment for SCADA and DCS networks". ISA transactions 46 (4): 583-594. (Pubitemid 47284077)
20. Ross, S. 1996. Stochastic processes. Wiley New York.
21. Shaw, W. 2006. Cybersecurity for SCADA systems. Pennwell Corp.
22. Stiliadis, D., and A. Varma. 1996. "Design and analysis of frame-based fair queueing: A new traffic scheduling algorithm for packet-switched networks". SIGMETRICS Performance Evaluation Review.