Critical state-based filtering system for securing SCADA network protocols

IEEE Transactions on Industrial Electronics

Volumn 59, Issue 10, 2012, Pages 3943-3950

  Nai Fovino, Igor ^a   Coletta, Alessio ^a   Carcano, Andrea ^b   Masera, Marcelo ^c  

^a Global Cyber Security Center   (Italy)

^b UNIVERSITY OF INSUBRIA   (Italy)

^c Institute for Energy   (Italy)

Author keywords

Critical state analysis; cyber security; firewall; SCADA systems

Indexed keywords

COMPUTER SYSTEM FIREWALLS; CRITICAL CURRENT DENSITY (SUPERCONDUCTIVITY); INTERNET PROTOCOLS; NETWORK ARCHITECTURE; NETWORK PROTOCOLS; NETWORK SECURITY;

CRITICAL STATE ANALYSIS; CYBER SECURITY; FILTERING SYSTEMS; FIREWALL; INDUSTRIAL SYSTEMS; INNOVATIVE APPROACHES; INTERNAL REPRESENTATION; PUBLIC NETWORKS;

SCADA SYSTEMS;

EID: 84860491228     PISSN: 02780046     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIE.2011.2181132     Document Type: Article

References (28)

1. R. A. Gupta and M. Y. Chow, "Networked control system: Overview and research trends," IEEE Trans. Ind. Electron., vol. 57, no. 7, pp. 2527-2535, Jul. 2010.
2. G. Dondossola, M. Masera, I. Nai Fovino, and J. Szanto, "Effects of intentional threats to power substation control systems," Proc. IJCIS, vol. 4, no. 1/2, pp. 129-143, 2008.
3. I. Nai Fovino, M. Masera, and R. Leszczyna, "ICT security assessment of a power plant, a case study," in Proc. 2nd Int. Conf. Critical Infrastructure Protect., Arlington, VA, Mar. 2008.
4. A. Carcano, I. Nai Fovino, M. Masera, and A. Trombetta, "Scada Malware, a proof of concept," in Proc. 3rd Int. Workshop Critical Inform. Infrastructures Security, Rome, Italy, Oct. 2008.
5. T. Novak and A. Gerstinger, "Safety-and security-critical services in building automation and control systems," IEEE Trans. Ind. Electron., vol. 57, no. 11, pp. 3614-3621, Nov. 2010.
6. W. Granzer, F. Praus, and W. Kastner, "Security in building automation systems," IEEE Trans. Ind. Electron., vol. 57, no. 11, pp. 3622-3630, Nov. 2010.
7. A. A. Creery and E. J. Byres, "Industrial cybersecurity for power system and SCADA networks," IEEE Ind. Appl. Mag., vol. 13, no. 4, pp. 49-55, Jul./Aug. 2007.
8. R. Chandia, J. Gonzalez, T. Kilpatrick, M. Papa, and S. Shenoi, "Security strategies for Scada networks," in Proc. 1st Int. Conf. Crit. Infrastructure Protection, Hanover, NH, Mar. 19-21, 2007.
9. M. K. Mahmood and F. M. Al-Naima, "Developing a multi-layer strategy for securing control systems of oil refineries," Wireless Sens. Netw., vol. 2, pp. 520-527, Jul. 2010.
10. I. H. Lim, S. Hong, M. S. Choi, S. J. Lee, T. W. Kim, S. W. Lee, and B. N. Ha, "Security protocols against cyber attacks in the distribution automation system," IEEE Trans. Power Del., vol. 25, no. 1, pp. 448-455, Jan. 2010.
11. T. Mander, F. Nabhani, L. Wang, and R. Cheung, "Data object based security for DNP3 over TCP/IP for increased utility commercial aspects security," in Proc. Power Eng. Soc. Gen. Meeting, Tampa, FL, Jun. 24-28, 2007, pp. 1-8.
12. M. Roesch, "Snort-lightweight intrusion detection for networks," in Proc. 13th Syst. Admin. Conf. LISA, Seattle, WA, 1999, pp. 229-238.
13. Last access 9/04/2009. [Online]. Available: http://www.digitalbond.com/ index.php/research/ids-signatures/modbus-tcp-ids-signatures
14. P. Gross, J. Parekh, and G. Kaiser, "Secure selecticast for collaborative intrusion detection systems," in Proc. Int. Workshops DEBS, 2004, pp. 50-54.
15. V. Yegneswaran, P. Barford, and S. Jha, "Global intrusion detection in the DOMINO overlay system," in Proc. 11th ANDSSS Conf., 2004, pp. 120-137.
16. F. Cuppens and A. Miege, "Alert correlation in a cooperative intrusion detection framework," in Proc. Security Privacy, 2002, pp. 202-215.
17. I. Nai Fovino and M. Masera, "A service oriented approach to the assessment of infrastructure security," in Proc. 1st Annu. IFIP Working Group 11.10 Int. Conf. Crit. Infrastructure Protection, Dartmouth College, Hanover, NH, Mar. 19-21, 2007, pp. 367-379.
18. I. Nai Fovino and M. Masera, "Emergent disservices in interdependent systems and system-of-systems," in Proc. IEEE Conf. Syst., Man Cybern., Taipei, Taiwan, Oct. 2006, pp. 590-595.
19. M. Masera and I. Nai Fovino, "Models for security assessment and management," in Proc. Int. Workshop Complex Netw. Infrastructure Protect., 2006, pp. 1-12.
20. I. Nai Fovino and M. Masera, "Modelling information assets for security risk assessment in industrial settings," in Proc. 15th EICAR Annu. Conf., Hambourg, Germany, 2006, pp. 137-149.
21. R. Isermann, "Supervision, fault-detection and fault-diagnosis methods-An introduction," Control Eng. Pract., vol. 5, no. 5, pp. 639-652, May 1997.
22. R. Isermann, "Process fault detection based on modelling and estimation methods-A survey," Automatica, vol. 20, no. 4, pp. 387-404, Jul. 1984.
23. P. M. Frank, "Advanced fault detection and isolation schemes using non linear and robust observers," in Proc. 10th IFAC Congr., Munich, Germany, 1987, vol. 3, pp. 63-68.
24. K. Natori and K. Ohnishi, "A design method of communication disturbance observer for time-delay compensation, taking the dynamic property of network disturbance into account," IEEE Trans. Ind. Electron., vol. 55, no. 5, pp. 2152-2168, May 2008.
25. A. Onat, T. Naskali, E. Parlakay, and O. Mutluer, "Control over imperfect networks: Model based predictive networked control systems," IEEE Trans. Ind. Electron., vol. 58, no. 3, pp. 905-913, Mar. 2011.
26. C.-L. Su and Y.-C. Chang, "A SCADA system reliability evaluation considering performance requirement," in Proc. Int. Conf. Power Syst. Technol., Singapore, 2004, pp. 574-579.
27. Y. Quiang, J. A. Barria, and C. A. H. Aramburo, "A communicaton system architecture for regional control of power distribution networks," in Proc. 7th IEEE Int. Conf. INDIN, 2009, pp. 372-377.
28. C. L. Su, C. N. Lu, and M. C. Lin, "Wide area network performance study of a distribution management system," in Proc. Transm. Distrib. Conf., Apr. 11-16, 1999, vol. 1, pp. 136-141.