Vulnerability Analysis and Enhancement of Security of Communication Protocol in Industrial Control Systems

Author Name(s): Rajesh L, Penke Satyanarayana
Author Email: locharalarajesh@gmail.com

Abstract

Industrial Control Systems (ICS) are using for monitoring and controlling process plants like Oil & Gas refineries, Power generation and distribution etc. The data acquisition server in these ICS systems uses communication protocol like MODBUS, DNP to collect the data from PLC (Programmable Logic Controller) or Remote Telemetry Unit (RTU). Currently, infrastructure utilities depend heavily on their ICS systems in real-time. In earlier days these ICS systems were isolated from the external world and used dedicated network. But as technology evolves and time passes, these systems are connected to internet for remote monitoring through web access and data transfer to higher layers like Enterprise Resource Planning (ERP). MODBUS is widely used communication protocol for bi-directional data transfer between PLC and SCADA Servers, in industrial control systems and have been using since long time. But there are no security measures in MODBUS protocol. Security of these national critical infrastructures is key important role in safe and secure operations of these plants. The communication protocols are one of critical areas where security vulnerabilities are predominant. In this paper a test bed was set up and various attacks were simulated and analyzed the impact of the various security vulnerabilities/attacks on MODBUS Protocol. We proposed a new method for enhancing the security in MODBUS protocol.

Introduction

The National Critical Infrastructure (NCI) sectors are very crucial for development of any country. They play a vital role in supporting modern society. It can be defined as any functions, systems or facilities whose incapacity or nonfunctionality cause unbearable impact on national security, governance, economy and social well-being of a nation [1-2]. The safety, protection of NCI for reliable performance and operation is very crucial. Some of the NCI sectors are Nuclear Power Plants, Oil & Gas refineries and pipelines, Power generation and Transportation, Defense and space, Telecommunication systems, Banking & Finance, Transportation, Chemical Plants, Pharmaceuticals and Water supply etc. [3]. Many Industrial Control Systems (ICS) or Process Control Systems (PCS) are using for monitoring and controlling various plants, processes in these critical infrastructures. The protection of these systems from Cyberattacks is very crucial for the proper safe and secure operation of the plants [4]. These systems are generally spread over miles of distance and programmed control functionality in main central computer. These systems are, now-adays, connected to corporate networks for interfacing with their enterprise systems such as Energy Management Systems (EMS) or Distribution Management Systems (DMS) etc

Conclusion

MODBUS is an industry standard communication protocol which is widely used in industrial control systems. An ICS system is using in national critical infrastructure for monitoring and controlling the field operations and automation to achieve high productivity. MODBUS protocol was developed without considering security features, which can be easily accessed by attackers. In this project, a test bed was set up and various attack scenarios were simulated to understand the possible attacks in the MODBUS protocol. A new method was proposed with gateways to manipulate the MODBUS frame formats which can be easily integrated with all types of SCADA and PLCs from various vendors. It provides interoperability with available products in the market. In future the proposed method will be implemented and tested.

989 total views, no views today

Download PDF File

About the author: admin