RBAC model for SCADA

Innovative Algorithms and Techniques in Automation, Industrial Electronics and Telecommunications

Volumn , Issue , 2007, Pages 329-335

  Majdalawieh, Munir ^a   Parisi Presicce, Francesco ^b   Sandhu, Ravi ^b,c  

^a AMERICAN UNIVERSITY OF SHARJAH   (United Arab Emirates)

^b GEORGE MASON UNIVERSITY   (United States)

^c NSD Security   (United States)

Author keywords

DNP3; DNPSec; RBAC; SCADA

Indexed keywords

INDUSTRIAL ELECTRONICS; SCADA SYSTEMS; TELLURIUM COMPOUNDS;

APPLICATION LEVEL; AUTHORIZATION AND ACCESS CONTROL; DNP3; DNPSEC; RBAC; ROLE-BASED ACCESS CONTROL; ROLE-BASED ACCESS CONTROL MODEL; SCADA;

ACCESS CONTROL;

EID: 84860344368     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/978-1-4020-6266-7_59     Document Type: Conference Paper

References (22)

1. Gail-Joon Ahn and Ravi Sandhu, "Role-Based Authorization Constraints Specification".
2. John Barkley, Anthony Cinotta (NIST), "Managing Role/Permission Relationships Using Object Access Types".
3. L. Beaver, D.R. Gallup, W. D. NeuMann, and M.D. Torgerson., "Key Management for SCADA" http://www.sandia.gov/scada/documents/013252.pdf.
4. rd edition".
5. Brian Broyles and Frank Kling, "Is there anything new under the SCADA sun?" http://www.rigzone.com/insight/insight.asp?i-id=32.
6. DNP User Group, http://www.dnp.org.
7. th Annual Computer Security Applications Proceedings, December 1995.
8. David Ferraiolo, Ravi Sandhu, Serban Gavrila, D. Richard Kuhn, and Ramaswamy Chandramouli, "Proposed NIST Standard for Role-Based Access Control".
9. Munir Majdalawieh, Francesco Parisi-Presicce and Duminda Wijesekera, DNP Sec: A Security framework for DNP3 in SCADA Systems, in International Joint Conference on Computer Information and Systems Sciences and Engineering, Bridgeport, CT. December 10-20, 2005.
10. NERC, Version, June 14, 2002. Security Guidance for the Electricity Sector: Cyber - Access Controls.
11. Jaehong Park and Ravi Sandhu, "The UCONABC Usage Control Model".
12. The Register, "Hacker jailed for revenge sewage attacks" http://www.theregister.co.uk/2001/10/31/hacker-jailed-for-revenge-sewage.
13. Ravi Sandhu, "Issues in RBAC", http://www.list.gmu.edu/ workshop/issue.pdf.
14. Ravi Sandhu, Venkata Bhamidipati, and Qamar Munawer, "The ARBAC97 Model for Role-Based Administration of Roles.".
15. Ravi Sandhu, Edward J. Coyne, Hal Feinstein, and Charles Youman, "Role-Based Access Control Models".
16. Riptech, Inc. January 2001 "Understanding SCADA System Security Vulnerabilities", http://www.iwar.org.uk/rerources/utilities/ SCADAWhitepaperfinal1.pdf.
17. Sandia National Laboratories, The Center for SCADA Security, SCADA Brief History http://www.sandia.gov/scada/history.htm.
18. Joe St Sauver, Ph.D. University of Oregon. SCADA Security, http://darkwing.uoregon.edu/~joe/scada/.
19. U.S. Department of Energy, "21 Steps to Improve the Cyber Security of SCADA Networks, " http://www.ea.doe.gov/pdfs/21stepsbooklet.pdf.
20. U.S. General Accounting Office, "Critical Infrastructure Protection: Challenges and Efforts to Secure Control Systems" http://www.gao.gov/new. items/d04354.pdf.
21. William F. Young, Jason E. Stamp, and John D. Dillinger. "Communication Vulnerabilities and Mitigation in Wind Power SCADA Systems".
22. Bill Young and Mark Rumsey. "Communication Vulnerabilities and Mitigations in Wind Power Supervisory Control and Data Acquisition.".