Modbus/DNP3 state-based filtering system

The security of SCADA systems is one of the most pressing subjects in industrial systems, especially for those installation actively using the public network in order to provide new features and services. In this paper we present an innovative approach to the design of Filtering Systems based on the...

Full description

Saved in:
Bibliographic Details
Published in2010 IEEE International Symposium on Industrial Electronics pp. 231 - 236
Main Authors Carcano, A, Fovino, I Nai, Masera, M
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.07.2010
Subjects
Coils
Fires
IP networks
Power generation
Protocols
SCADA systems
Security
Online AccessGet full text

Cover

More Information
Summary:The security of SCADA systems is one of the most pressing subjects in industrial systems, especially for those installation actively using the public network in order to provide new features and services. In this paper we present an innovative approach to the design of Filtering Systems based on the state analysis of the system being monitored. The aim is to detect attacks composed of a set of "SCADA" commands that, while licit when considered in isolation on a single-packet basis, can disrupt the correct behavior of the system when executed in particular operating states. The proposed firewall detects these complex attacks thanks to an internal representation of the controlled SCADA system. Furthermore, we detail the design of the architecture of the IDS for systems using the ModBus and DNP3 protocols, and the implementation of a prototype, providing experimental comparative results that confirm the validity of the proposed approach.
ISBN:1424463904
9781424463909
ISSN:2163-5137
DOI:10.1109/ISIE.2010.5637577