Man-in-the-middle attack test-bed investigating cyber-security vulnerabilities in smart grid SCADA systems

IET Conference Publications

Volumn 2012, Issue 611 CP, 2012, Pages

  Yang, Y ^a   McLaughlin, K ^a   Littler, T ^a   Sezer, S ^a   Im, Eul Gyu ^b   Yao, Z Q ^c   Pranggono, B ^a   Wang, H F ^a  

^a QUEEN'S UNIVERSITY BELFAST   (United Kingdom)

^b Hanyang University   (South Korea)

^c CHINA ELECTRIC POWER RESEARCH INSTITUTE   (China)

Author keywords

Cyber security; Man in the middle attack; SCADA; Smart Grid

Indexed keywords

ADDRESS RESOLUTION PROTOCOL; COMMUNICATION INFRASTRUCTURE; CYBER SECURITY; INTERCONNECTIVITY; INTRUSION DETECTION AND PREVENTION; MAN IN THE MIDDLE ATTACKS; SCADA; SMART GRID;

INTRUSION DETECTION; SMART POWER GRIDS; SOFTWARE TESTING;

SCADA SYSTEMS;

EID: 84877738891     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1049/cp.2012.1831     Document Type: Conference Paper

References (30)

1. IEEE Guide for Electric Power Substation Physical and Electronic Security, IEEE Std 1402-2000(R2008), (2008).
2. Antiy CERT. Report on the Worm Stuxnet's Attack. Antiy Corp., Harbin, China. [Online]. Available: http://www.antiy.net/en/analysts/Report-On-the- Attacking-of-Worm-Struxnet-by-antiy-labs.pdf, (2010).
3. National Communication System, Technical Information Bulletin 04-1: Supervisory Control and Data Acquisition (SCADA) Systems. Arlington, VA. [Online]. Available: http://www.ncs.gov/library/tech-bulletins/2004/tib-04-1. pdf, (2004).
4. Joseph Weiss, Protecting industrial control systems from electronic threats. New York: Momentum Press, pp. 29-41, (2010).
5. The Smart Grid Interoperability Panel-Cyber Security Working Group. Guidelines for Smart Grid Cyber Security. NIST, Gaithersburg, MD. [Online]. Available: http://csrc.nist.gov/publications/PubsNISTIRs.html, (2010).
6. Y. Yang, T. Littler, S. Sezer, K. McLaughlin, and H. F. Wang, "Impact of cyber-security issues on Smart Grid," in Proc. 2nd IEEE/PES International Conf. and Exhibit. on Innovative Smart Grid Technologies (ISGT Europe), pp. 1-7, (2011).
7. U. K. Premaratne, J. Samarabandu, T. S. Sidhu, R. Beresh, and T. Jian-Cheng, "An Intrusion Detection System for IEC61850 Automated Substations," IEEE Trans. Power Delivery, vol. 25, pp. 2376-2383, (2010).
8. C. W. Ten, J. Hong, and C. C. Liu, "Anomaly Detection for Cybersecurity of the Substations," IEEE Trans. Smart Grid, vol. PP, pp. 1-1, (2011).
9. M. Mallouhi, Y. Al-Nashif, D. Cox, T. Chadaga, and S. Hariri, "A testbed for analyzing security of SCADA control systems (TASSCS)," in Proc. IEEE/PES Innovative Smart Grid Technologies (ISGT), pp. 1-7, (2011).
10. US-CERT. Vulnerability Note VU#190617: LiveData ICCP Server heap buffer overflow vulnerability, Washington, DC. [Online]. Available: http://www.kb.cert.org/vuls/id/190617, (2008).
11. P. Oman, E. Schweitzer, and J. Roberts, "Safeguarding IEDs, substations, and SCADA systems against electronic intrusions," in Proc. Western Power Delivery Automation Conf., pp. 9-12, (2001).
12. W. Dong, L. Yan, M. Jafari, P. Skare, and K. Rohde, "An integrated security system of protecting Smart Grid against cyber attacks," in Proc. Innovative Smart Grid Technologies (ISGT), pp. 1-7, (2010).
13. C. M. Davis, J. E. Tate, H. Okhravi, C. Grier, T. J. Overbye, and D. Nicol, "SCADA Cyber Security Testbed Development," in Proc. 38th North American Power Symposium, pp. 483-488, (2006).
14. G. Dondossola, G. Garrone, J. Szanto, G. Deconinck, T. Loix, and H. Beitollahi, "ICT resilience of power control systems: experimental results from the CRUTIAL testbeds," in Proc. IEEE/IFIP International Conf. on Dependable Systems & Networks, pp. 554-559, (2009).
15. T. Godfrey, S. Mullen, D. W. Griffith, N. Golmie, R. C. Dugan, and C. Rodine, "Modeling Smart Grid Applications with Co-Simulation," in Proc. First IEEE International Conf. on Smart Grid Communication, pp. 291-296, (2010).
16. K. Hopkinson, X. Wang, R. Giovanini, J. Thorp, K. Birman, and D. Coury, "EPOCHS: a platform for agent based electric power and communication simulation built from commercial off-the-shelf components," IEEE Trans. Power Systems, vol. 21, pp. 548-558, (2006).
17. C. L. Abad and R. I. Bonilla, "An Analysis on the Schemes for Detecting and Preventing ARP Cache Poisoning Attacks," in Proc. 27th International Conf. on Distributed Computing Systems Workshops (ICDCSW '07), pp. 60-60, (2007).
18. W. L. Ali A. Ghorbani, and Mahbod Tavallaee, Network Intrusion Detection and Prevention: concepts and techniques. London: Springer, pp. 1-20, (2010).
19. J. Verba and M. Milvich, "Idaho National Laboratory Supervisory Control and Data Acquisition Intrusion Detection System (SCADA IDS)," in Proc. IEEE Conf. on Technologies for Homeland Security, pp. 469-473, (2008).
20. M. P. Coutinho, G. Lambert-Torres, L. E. B. da Silva, H. G. Martins, H. Lazarek, and J. C. Neto, "Anomaly detection in power system control center critical infrastructures using rough classification algorithm," in Proc. 3rd IEEE International Conf. on Digital Ecosystems and Technologies, pp. 733-738, (2009).
21. I. N. Fovino, A. Carcano, T. De Lacheze Murel, A. Trombetta, and M. Masera, "Modbus/DNP3 State-Based Intrusion Detection System," in Proc. 24th IEEE International Conf. on Advanced Information Networking and Applications (AINA), pp. 729-736, (2010).
22. A. Carcano, A. Coletta, M. Guglielmi, M. Masera, I. N. Fovino, and A. Trombetta, "A Multidimensional Critical State Analysis for Detecting Intrusions in SCADA Systems," IEEE Trans. Industrial Informatics, vol. 7, pp. 179-186, (2011).
23. S. Cheung, B. Dutertre, M. Fong, U. Lindqvist, K. Skinner, and A. Valdes, "Using model-based intrusion detection for SCADA networks," In Proc. the SCADA Security Scientific Symposium, pp. 127-134, (2007).
24. O. Linda, T. Vollmer, and M. Manic, "Neural Network based Intrusion Detection System for critical infrastructures," in Proc. International Joint Conf. on Neural Networks, pp. 1827-1834, (2009).
25. J. Hurley, A. Munoz, and S. Sezer, "ITACA: Flexible, Scalable Network Analysis," IEEE International Conf. on Communications Industry Forum & Exhibit., Ottawa, Canada, Jun. 2012 (Accepted)
26. R. Deraison et al. The nessus project. [Online]. Available: http://www.nessus.org
27. J. C. Foster, Metasploit Toolkit for Penetration Testing, Exploit Development, and Vulnerability Research. Syngress Publishing, (2007).
28. Back Track 5 - Penetration Testing Distribution. [Online]. Available: http://www.backtrack-linux.org
29. Wireshark: A Network Protocol Analyzer. [Online]. Available: http://www.wireshark.org
30. Z. Trabelsi and K. Shuaib, "Man in the Middle Intrusion Detection," in Proc. IEEE Global Telecommunications Conf., pp. 1-6, (2006).