Authentication Layer for IEC 61113-3 Applications

Homay, Aydin; Chrysoulas, Christos; de Sousa, Mario

Abstract

Mid 2010, the Stuxnet ICS attack targeted the Siemens automation products, and after this attack the ICS security was thrust into spotlight, automation products suppliers started to re-examine their business approach to cyber security. The OPC Foundation made also significant changes and improvements on its new design OPC-UA to increase security of automation applications but, what is still missing and seems to be not resolved any time soon is having security in depth for industrial automation applications. In this paper, we propose a simple but strong security control solution, what we will call a logic application level security particularly for SCADA and DCS. This proposed method is based on message integrity and should not be viewed as the main, nor the only level of protection that an industrial automation system is expected to have, but can be a low-level security procedure that avoids intelligent attacks such as Stuxnet.

• Presentation Conference Type: Conference Paper (Published)
• Conference Name: 2019 10th IFIP International Conference on New Technologies, Mobility and Security (NTMS)
• Start Date: Jun 24, 2019
• End Date: Jun 26, 2019
• Acceptance Date: Apr 30, 2019
• Online Publication Date: Jul 15, 2019
• Publication Date: Jul 15, 2019
• Deposit Date: Feb 10, 2020
• Publisher: Institute of Electrical and Electronics Engineers
• Series ISSN: 2157-4960
• ISBN: 978-1-7281-1543-6
• DOI: https://doi.org/10.1109/ntms.2019.8763839
• Public URL: http://researchrepository.napier.ac.uk/Output/2548282