Design and Implementation of a Secure Modbus Protocol
Open accessThe claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The solution's overhead is 1.6% time delay compared to 66% time delay or latency as per [51], and 4% frame size overhead compared to 291% as per [33].
“Our solution overheads only 1.6% time delay compared to 66% time delay or latency as per [51].It adds 4% overhead on frame size, compared to 291% as per [33].”
From Detection and Blocking of Replay, False Command, and False Access Injection Commands in SCADA Systems with Modbus Protocol (2021) · cites this paper as [33]
The solution adds 4% overhead on Modbus frame size for reading coils/registers and 77% for writing coils/registers.
“It adds 4% overhead on frame size, compared to 291% as per [33].”
From Detection and Blocking of Replay, False Command, and False Access Injection Commands in SCADA Systems with Modbus Protocol (2021) · cites this paper as [33]
Both prior works [15] and [16] do not consider the confidentiality requirement for Modbus messages.
“However, both of these works do not consider the confidentiality requirement for Modbus messages, as they are usually implemented using cryptography, which is expensive and presents a considerable overhead that can affect the performance in real-time communication [15,16].”
From Enhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported (2022) · cites this paper as [15]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
A method for obtaining digital signatures and public-key cryptosystems
Rivest, R. L., Shamir, A., & Adleman, L. (1978) · Communications of the ACM · doi:10.1145/359340.359342 · Cited by 13,462 · see citing works
A method for obtaining digital signatures and public-key cryptosystems
Rivest, R. L., Shamir, A., & Adleman, L. (1983) · Communications of the ACM · doi:10.1145/357980.358017 · Cited by 13,012 · see citing works
Computer Security: Art and Science
Bishop, M. (2002) · Cited by 1,234 · see citing works
Attack taxonomies for the Modbus protocols
Huitsing, P., Chandia, R., Papa, M., & Shenoi, S. (2008) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2008.08.003 · Cited by 249 · see citing works
Security Strategies for SCADA Networks
Chandia, R., Gonzalez, J., Kilpatrick, T., Papa, M., & Shenoi, S. (2007) · Springer eBooks · doi:10.1007/978-0-387-75462-8_9 · Cited by 87 · see citing works
Security Vulnerabilities in Software Systems: A Quantitative Perspective
Alhazmi, O. H., Malaiya, Y. K., & Ray, I. (2005) · Lecture notes in computer science · doi:10.1007/11535706_21 · Cited by 75 · see citing works
Low-Latency Cryptographic Protection for SCADA Communications
Wright, A. K., Kinast, J. A., & McCarty, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24852-1_19 · Cited by 69 · see citing works
Critical Infrastructure Protection II
Papa, M., & Shenoi, S. (2009) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-0-387-88523-0 · Cited by 59 · see citing works
Industrial cybersecurity for a power system and SCADA networks - Be secure
Creery, A., & Byres, E. J. (2007) · IEEE Industry Applications Magazine · doi:10.1109/mia.2007.4283509 · Cited by 49 · see citing works
Risk Management for Computer Security: Protecting Your Network & Information Assets
Jones, A., & Ashenden, D. (2005) · Butterworth-Heinemann eBooks · Cited by 48 · see citing works
Effects of intentional threats to power substation control systems
Dondossola, G., Szanto, J., Masera, M., & Fovino, I. N. (2007) · International Journal of Critical Infrastructures · doi:10.1504/ijcis.2008.016096 · Cited by 47 · see citing works
Self-citationData Object Based Security for DNP3 Over TCP/IP for Increased Utility Commercial Aspects Security
Mander, T., Nabhani, F., Wang, L., & Cheung, R. (2007) · IEEE Power Engineering Society General Meeting · doi:10.1109/pes.2007.386243 · Cited by 42 · see citing works
BACnet Wide Area Network Security Threat Assessment
Holmberg, D. G., Holmberg, D. G., & Evans, D. L. (2003) · Cited by 34 · see citing works
BACnet wide area network security threat assessment
Holmberg, D. G. (2003) · doi:10.6028/nist.ir.7009 · Cited by 34 · see citing works
Scada Malware, a Proof of Concept
Carcano, A., Fovino, I. N., Masera, M., & Trombetta, A. (2009) · Lecture Notes in Computer Science · doi:10.1007/978-3-642-03552-4_19 · Cited by 31 · see citing works
Self-citationData and Applications Security XIX
(2005) · Lecture notes in computer science · doi:10.1007/11535706 · Cited by 29 · see citing works
Simulating malware with MAlSim
Leszczyna, R., Nai Fovino, I., & Masera, M. (2010) · Journal in Computer Virology · doi:10.1007/s11416-008-0088-y · Cited by 23 · see citing works
Self-citationA Security Mechanism for Automation Control in PLC-based Networks
Heo, J., Hong, C. S., Ju, S., Lim, Y. H., Lee, B. S., & Hyun, D.-H. (2007) · IEEE International Symposium on Power Line Communications and Its Applications (ISPLC) · doi:10.1109/isplc.2007.371169 · Cited by 21 · see citing works
Security Assessment Of A Turbo-Gas Power Plant
Masera, M., Fovino, I. N., & Leszczyna, R. (2010) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-0-387-88523-0_3 · Cited by 15 · see citing works
Self-citation
Flagged first, then by citations
1 of the 20 references couldn’t be matched to a known paper.
Research works printed but not linked: 2
- M. Majdalawieh, F. Parisi-Presicce and D. Wijesekera, DNPSec: Distributed Network Protocol Version 3 security framework, presented at the Twenty-First Annual Computer Security Applications Conference (Technology Blitz Session), 2005.
- M. Wiener, H. Handschuh, P. Pallier, R. Rivest, E. Biham and L. Knudsen, Performance comparison of public-key cryptosystems, smartcard crypto-coprocessors for public-key cryptography, chaffing and winnowing: Confidentiality without encryption, DES, Triple-DES and AES, CryptoBytes, vol. 4(1), 1998.
Cited by
Sorted by citations
Cyber–Physical System Security for the Electric Power Grid
Sridhar, S., Hahn, A., & Govindarasu, M. (2011) · Proceedings of the IEEE · doi:10.1109/jproc.2011.2165269 · Cited by 1,219 · see citing works
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics
Pliatsios, D., Sarigiannidis, P., Lagkas, T., & Sarigiannidis, A. G. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.2987688 · Cited by 320 · see citing works
“Authors in [102] describe a modified version of the Modbus protocol that utilizes anti-replay techniques and authentication mechanisms.”
BackgroundIntegration of IoT in building energy infrastructure: A critical review on challenges and solutions
Moudgil, V., Hewage, K., Hussain, S. A., & Sadiq, R. (2022) · Renewable and Sustainable Energy Reviews · doi:10.1016/j.rser.2022.113121 · Cited by 124 · see citing works
Security Challenges in Control Network Protocols: A Survey
Volkova, A., Niedermeier, M., Basmadjian, R., & de Meer, H. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2872114 · Cited by 118 · see citing works
“, in [28] (referred to as Modbus-F2009 from here on), [29] (referred to as Modbus-S2015 from here on), and [30] (referred to as Modbus-A2018 from here on).”
BackgroundAutonomous mitigation of cyber risks in the Cyber–Physical Systems
Kholidy, H. A. (2020) · Future Generation Computer Systems · doi:10.1016/j.future.2020.09.002 · Cited by 100 · see citing works
Alves, T., Das, R., & Morris, T. H. (2018) · IEEE Embedded Systems Letters · doi:10.1109/les.2018.2823906 · Cited by 91 · see citing works
Review on cyber vulnerabilities of communication protocols in industrial control systems
Xu, Y., Yang, Y., Li, T., Ju, J., & Wang, Q. (2017) · IEEE Conference on Energy Internet and Energy System Integration (EI2) · doi:10.1109/ei2.2017.8245509 · Cited by 90 · see citing works
An experimental platform for assessing SCADA vulnerabilities and countermeasures in power plants
Fovino, I. N., Masera, M., Guidi, L., & Carpi, G. (2010) · Conference on Human System Interactions · doi:10.1109/hsi.2010.5514494 · Cited by 86 · see citing works
Self-citationShahzad, A., Lee, M., Lee, Y.-K., Kim, S., Xiong, N., Choi, J.-Y., & Cho, Y. (2015) · Symmetry · doi:10.3390/sym7031176 · Cited by 86 · see citing works
Industrial control systems security: What is happening?
Krotofil, M., & Gollmann, D. (2013) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2013.6622964 · Cited by 74 · see citing works
“In the scenario presented, the attacker issues bogus Modbus packets to three different valves at a boiling plant trying to keep them in a certain position.”
BackgroundCyber security threats — Smart grid infrastructure
Pandey, R. K., & Misra, M. (2016) · National Power Systems Conference · doi:10.1109/npsc.2016.7858950 · Cited by 71 · see citing works
“It is also possible to create “man-in-themiddle” attack [24] between the SCADA and the slave devices (RTUs or PLCs) to get information regarding the network topology and device functionality.”
BackgroundVosughi, A., Tamimi, A., King, A. B., Majumder, S., & Srivastava, A. K. (2022) · Renewable and Sustainable Energy Reviews · doi:10.1016/j.rser.2022.112794 · Cited by 58 · see citing works
Krotofil, M., Cárdenas, Á. A., Larsen, J., & Gollmann, D. (2014) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2014.10.003 · Cited by 57 · see citing works
“designing control-system-specific defenses such as intrusion detection systems [14,33,43], authentication and encryption schemes [32], access control [31], policy enforcement [29], code verification [30] and risk management [34].”
BackgroundSCADAWall: A CPI-enabled firewall model for SCADA security
Li, D., Guo, H., Zhou, J., Zhou, L., & Wong, J. W. (2018) · Computers & Security · doi:10.1016/j.cose.2018.10.002 · Cited by 53 · see citing works
Katulić, F., Sumina, D., Groš, S., & Erceg, I. (2023) · IEEE Access · doi:10.1109/access.2023.3275443 · Cited by 53 · see citing works
“With the analysis of the Modbus/TCP cybersecurity, possible cryptography-based solutions emerged, such as [16] in which the authors implemented RSA digital signatures for the authentication and a selected SHA-2 hash function for the integrity protection of Modbus/TCP.”
BackgroundMethodEnhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported
Martins, T., & Oliveira, S. V. G. (2022) · Sensors · doi:10.3390/s22208024 · Cited by 45 · see citing works
“A solution using integrity mechanisms through the SHA2 algorithm, authentication through RSA, and non-repudiation and anti-replay through the timestamp is presented in [15].”
Krotofil, M., Cárdenas, Á. A., Manning, B., & Larsen, J. (2014) · Annual Computer Security Applications Conference · doi:10.1145/2664243.2664290 · Cited by 40 · see citing works
“A large body of literature on Industrial Control Systems (ICS) security looks at intercepting and manipulating the tra c [29], infection by malware [3], access by unauthorized users [18] and addresses the threats by designing ICS-specific defenses such as intrusion detection systems [32, 13], authentication and encryp…”
BackgroundFormal security assessment of Modbus protocol
Nardone, R., Rodríguez, R. J., & Marrone, S. (2016) · International Conference for Internet Technology and Secured Transactions · doi:10.1109/icitst.2016.7856685 · Cited by 41 · see citing works
“[14] proposed an extension of Modbus protocol to support authentication, non-repudiation, and replay protection.”
BackgroundImplementation of Secure Communication With Modbus and Transport Layer Security protocols
Ferst, M. K., de Figueiredo, H. F. M., Denardin, G., & Lopes, J. (2018) · 2018 13th IEEE International Conference on Industry Applications (INDUSCON) · doi:10.1109/induscon.2018.8627306 · Cited by 41 · see citing works
“Some applications, especially those related to infrastructure assets, have a critical nature and a fault in these systems may lead to unrecoverable damages and losses, affecting general population [2].”
BackgroundMethodReaves, B., & Morris, T. H. (2012) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2012.10.001 · Cited by 37 · see citing works
A Systematic Literature Review on RAMS analysis for critical infrastructures protection
Pirbhulal, S., Gkioulos, V., & Katsikas, S. K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100427 · Cited by 37 · see citing works
Industrial control systems security: What is happening?
Krotofil, M., & Gollmann, D. (2013) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2013.6622963 · Cited by 35 · see citing works
A Stealthy False Command Injection Attack on Modbus based SCADA Systems
Alsabbagh, W., Amogbonjaye, S., Urrego, D., & Langendörfer, P. (2023) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc51644.2023.10059804 · Cited by 34 · see citing works
“An alternative solution would be using the modified version of the modbus protocol introduced in [31].”
MethodResearch and Implementation of Modbus TCP Security Enhancement Protocol
Luo, X., & Li, Y. (2019) · Journal of Physics Conference Series · doi:10.1088/1742-6596/1213/5/052058 · Cited by 34 · see citing works
L, R., & Satyanarayana, P. (2021) · Security and Communication Networks · doi:10.1155/2021/8887666 · Cited by 28 · see citing works
An integrated testbed for locally monitoring SCADA systems in smart grids
Chromik, J. J., Remke, A., & Haverkort, B. R. H. M. (2018) · Energy Informatics · doi:10.1186/s42162-018-0058-7 · Cited by 28 · see citing works
“Security extensions for Modbus/TCP protocol have been proposed, e.g., (Fovino et al. 2009; Shahzad et al. 2015; Éva et al. 2018), which, however, do require changes on the protocol level of operating devices.”
Probability Risk Identification Based Intrusion Detection System for SCADA Systems
Marsden, T., Moustafa, N., Sitnikova, E., et al. (2018) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-319-90775-8_28 · Cited by 27 · see citing works
“All information collected from packets is available as header information from the Application Data Unit (ADU) and Protocol Data Unit (PDU), this means that we can deploy this technique in realtime on an encrypted network [9].”
MethodTertytchny, G., Karbouj, H., Hadjidemetriou, L., Charalambous, C., Michael, M. K., Sazos, M., & Maniatakos, M. (2020) · IEEE CyberPELS (CyberPELS) · doi:10.1109/cyberpels49534.2020.9311531 · Cited by 28 · see citing works
“For example, as it is proposed by authors in [12], Modbus TCP is improved by changing its packet format representation using encryption and checksum schemes.”
MethodSecuring SCADA Applications Using OpenPLC With End-To-End Encryption
Alves, T., Morris, T., & Yoo, S.-M. (2017) · Proceedings of the 3rd Annual Industrial Control System Security Workshop · doi:10.1145/3174776.3174777 · Cited by 26 · see citing works
“The work put forth by Fovino [9] describes a secure version of the Modbus SCADA protocol that incorporates integrity, authentication, non-repudiation and anti-replay mechanisms.”
BackgroundYang, Y., Lee, S., Wang, J.-M., et al. (2023) · Sensors · doi:10.3390/s23104970 · Cited by 26 · see citing works
“In today’s industrial environment, most data communications are conducted using the Modbus protocol [3].”
MethodAssessment of SCADA System Vulnerabilities
Yadav, G., & Paul, K. (2019) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa.2019.8869541 · Cited by 27 · see citing works
“The communication network protocols lack the support of security features [15].”
BackgroundFormal Analysis of Security Properties on the OPC-UA SCADA Protocol
Puys, M., Potet, M.-L., & Lafourcade, P. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-45477-1_6 · Cited by 24 · see citing works
“[10] proposed a secure version of MODBUS relying on well-known cryptographic primitives such as RSA and SHA2.”
MethodAuthentication of Smart Grid by Integrating QKD and Blockchain in SCADA Systems
Aggarwal, S., & Kaddoum, G. (2024) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2024.3423762 · Cited by 24 · see citing works
“The traditional SCADA system, relying on conventional protocols, like Modbus [32], faces significant challenges concerning security and privacy in smart grid communications.”
MethodAutomated and Secure Onboarding for System of Systems
Maksuti, S., Bicaku, A., Zsilak, M., Ivkić, I., Peceli, B., Singler, G., Kovács, K., Tauber, M., & Delsing, J. (2021) · IEEE Access · doi:10.1109/access.2021.3102280 · Cited by 23 · see citing works
“IEC 61850-9-2 Sampled Values (SV) [39], IEC 61850-8-1 Generic Object Oriented Substation Event (GOOSE) [40], Manufacturing Message Specification (MMS) [41], Modbus [42], etc., provide the core communication mechanisms for industrial environments such as power utilities, manufacturing, and transportation.”
Cyber‐Physical System Resilience
Haque, M. A., Shetty, S. S., & Krishnappa, B. (2019) · doi:10.1002/9781119552482.ch12 · Cited by 22 · see citing works
On the use of open-source firewalls in ICS/SCADA systems
Nivethan, J., & Papa, M. (2016) · Information Security Journal A Global Perspective · doi:10.1080/19393555.2016.1172283 · Cited by 20 · see citing works
“Even in cases where a PLC has the capability to white-list hosts by IP address, this PLC would still be exploitable (Fovino et al., 2009).”
BackgroundComparative analysis of the security of configuration protocols for industrial control devices
Martín-Liras, L., Prada, M. A., Fuertes, J. J., et al. (2017) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2017.10.001 · Cited by 20 · see citing works
Dynamic rule generation for SCADA intrusion detection
Nivethan, J., & Papa, M. (2016) · doi:10.1109/ths.2016.7568964 · Cited by 20 · see citing works
“The Modbus protocol does not verify the source of a command [19].”
BackgroundVulnerability assessment of industrial systems using Shodan
Alsmadi, I. M., Dwekat, Z. A., Cantu, R., et al. (2021) · Cluster Computing · doi:10.1007/s10586-021-03330-3 · Cited by 19 · see citing works
“Authors in [2] suggested a technique to provide security using shared keys.”
BackgroundMethodGenge, B., Haller, P., & Duka, A.-V. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.09.001 · Cited by 19 · see citing works
Demonstration of Man in the Middle Attack on a Feeder Power Factor Correction Unit
Hadjidemetriou, L., Tertytchny, G., Karbouj, H., Charalambous, C., Michael, M. K., Sazos, M., & Maniatakos, M. (2020) · IEEE PES Innovative Smart Grid Technologies Europe · doi:10.1109/isgt-europe47291.2020.9248779 · Cited by 18 · see citing works
“For instance, the authors in [10] improved Modbus protocol security by changing the packet format representation using encryption and checksum schemes such as SHA-2.”
BackgroundSlunjski, M., Sumina, D., Groš, S., & Erceg, I. (2022) · IEEE Access · doi:10.1109/access.2022.3217797 · Cited by 18 · see citing works
“In [19], the authors suggested an extension of Modbus protocol, which could rectify some main security downsides of the protocol.”
BackgroundSecuring industrial control system environments: the missing piece
Ani, U., Daniel, N., Oladipo, F. O., & Adewumi, S. E. (2018) · Journal of Cyber Security Technology · doi:10.1080/23742917.2018.1554985 · Cited by 17 · see citing works
“The authors in [108] pro ff ered a potential solution (adding security capabilities for integrity, authentication and anti-replay protection) that hinges success on the e ff ective preservation of secrecy of shared keys.”
BackgroundZhang, H., Min, Y., Liu, S., Tong, H., Li, Y., & Lv, Z. (2023) · Mobile Networks and Applications · doi:10.1007/s11036-023-02108-8 · Cited by 16 · see citing works
“…worked on enhancing the security of the Modbus protocol itself, they often use additional security fields or encryption to design the secure versions of Modbus, with representative work such as Fovino [9] and Liao [10]’s works, but such structural additions may cause some degree of efficiency loss.”
MethodSecure Cryptography Testbed Implementation for SCADA Protocols Security
Shahzad, A., Musa, S., Aborujilah, A., & Irfan, M. (2013) · International Conference on Advanced Computer Science Applications and Technologies · doi:10.1109/acsat.2013.69 · Cited by 15 · see citing works
“Security Solution1 successfully verified the security services such as authentication, integrity, confidentiality and non-repudiation, during SCADA communication.”
BackgroundCyber security issues of critical components for industrial control system
Yang, W., & Zhao, Q. (2014) · IEEE CSAA Guidance, Navigation and Control Conference (CGNCC) · doi:10.1109/cgncc.2014.7007593 · Cited by 15 · see citing works
“[43] presented a secure version of the Modbus SCADA protocol that incorporates integrity, authentication, non-repudiation and anti-replay mechanisms.”
Clustering method in protocol reverse engineering for industrial protocols
Shim, K., Goo, Y., Lee, M., & Kim, M. (2020) · International Journal of Network Management · doi:10.1002/nem.2126 · Cited by 15 · see citing works
“Modbus is a simple, effective, and free serial bus 27 wherein up to 247 nodes can be connected within the same link.”
BackgroundTAMBUS: A novel authentication method through covert channels for securing industrial networks
Bernieri, G., Cecconello, S., Conti, M., & Lain, G. (2020) · Computer Networks · doi:10.1016/j.comnet.2020.107583 · Cited by 14 · see citing works
Why Anomaly-Based Intrusion Detection Systems Have Not Yet Conquered the Industrial Market?
Seng, S., Joaquin Garcia-alfaro, B., & Laarouchi, Y. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-08147-7_23 · Cited by 13 · see citing works
Drias, Z., Serhrouchni, A., & Vogel, O. (2017) · Cyber Security in Networking Conference (CSNet) · doi:10.1109/csnet.2017.8242008 · Cited by 12 · see citing works
“[12] FOVINO, Igor Nai, CARCANO, Andrea, MASERA, Marcelo, et al.”
BackgroundAn Overview of the Security of Programmable Logic Controllers in Industrial Control Systems
Cui, H., Hong, J. B., & Louden, R. (2024) · Encyclopedia · doi:10.3390/encyclopedia4020056 · Cited by 12 · see citing works
“Fovino et al. [55] found several vulnerabilities in the MODBUS protocol due to its lack of security-enhancing techniques.”
BackgroundLow-Cost Communication Interface between a Smart Meter and a Smart Inverter
Piggott, C. E., Caruso, Z., & Nenadic, N. G. (2023) · Energies · doi:10.3390/en16052358 · Cited by 11 · see citing works
Mismatched Control and Monitoring Frequencies: Vulnerability, Attack, and Mitigation
Yang, Z., He, L., Cheng, P., & Chen, J. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3384146 · Cited by 12 · see citing works
Design and Implementation of SAE J1939 and Modbus Communication Protocols for Electric Vehicle
Alzahrani, A., Wangikar, S. M., Indragandhi, V., et al. (2023) · Machines · doi:10.3390/machines11020201 · Cited by 11 · see citing works
Modbus Data Provider for Automation Researcher Using C#
Chakraborty, S., & Aithal, P. S. (2023) · International Journal of Case Studies in Business IT and Education · doi:10.47992/ijcsbe.2581.6942.0285 · Cited by 11 · see citing works
Proposal of a Secure Modbus RTU Communication with Adi Shamir's Secret Sharing Method
Ádámkó, É., Jakabóczki, G., & Szemes, P. T. (2018) · International Journal of Electronics and Telecommunications · doi:10.24425/119357 · Cited by 11 · see citing works
Rajesh, L., & Satyanarayana, P. (2019) · Helix · doi:10.29042/2019-5122-5127 · Cited by 11 · see citing works
Lin, X., Zhang, Y., Huang, C., Xing, B., Chen, L., Hu, D., & Chen, Y. (2023) · Sensors · doi:10.3390/s23073443 · Cited by 10 · see citing works
“It is responsible for communicating with IoT devices using dedicated structured protocols (e.g., mqtt [37], modbus [38], etc.) and invoking smart contracts deployed on the blockchain to authenticate the requester’s access token to reduce security issues caused by a large number of IoT devices…”
BackgroundPham, L. N. H. (2022) · Energies · doi:10.3390/en16010042 · Cited by 10 · see citing works
Process-aware SCADA traffic monitoring : a local approach
Chromik, J. J. (2019) · doi:10.3990/1.9789036548014 · Cited by 10 · see citing works
Security Enhancement Mechanism of Modbus TCP Protocol
Luo, X., & Li, Y. (2019) · DEStech Transactions on Computer Science and Engineering · doi:10.12783/dtcse/iciti2018/29146 · Cited by 9 · see citing works
Detecting Flooding Attacks in Communication Protocol of Industrial Control Systems
Rajesh, L., & Satyanarayana, P. (2020) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2020.0110149 · Cited by 9 · see citing works
Vaagensmith, B. C., Singh, V. K., Ivans, R. C., Marino, D. L., Wickramasinghe, C. S., Lehmer, J. P., Phillips, T., Rieger, C. G., & Manic, M. (2021) · Energies · doi:10.3390/en14051409 · Cited by 9 · see citing works
Efficient Group-Key Management for Low-bandwidth Smart Grid Networks
Hanna, Y., Cebe, M., Mercan, S., & Akkaya, K. (2021) · 2021 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm) · doi:10.1109/smartgridcomm51999.2021.9631988 · Cited by 8 · see citing works
IoT devices deployment challenges and studies in building management system
Chan, R., Yan, W. K., Ma, J. M., et al. (2023) · Frontiers in the Internet of Things · doi:10.3389/friot.2023.1254160 · Cited by 8 · see citing works
Niu, X., Cook, M. M., & Pezaros, D. P. (2024) · doi:10.1145/3642974.3652287 · Cited by 8 · see citing works
Security Issues and Mitigation in Ethernet POWERLINK
Yung, J., Debar, H., & Granboulan, L. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-61437-3_6 · Cited by 8 · see citing works
Formally and practically verifying flow properties in industrial systems
Dreier, J., Puys, M., Potet, M.-L., Lafourcade, P., & Roch, J.-L. (2018) · Computers & Security · doi:10.1016/j.cose.2018.09.018 · Cited by 8 · see citing works
A Malware-Tolerant, Self-Healing Industrial Control System Framework
Denzel, M., Ryan, M. D., & Ritter, E. (2017) · IFIP advances in information and communication technology · doi:10.1007/978-3-319-58469-0_4 · Cited by 8 · see citing works
“In combination with historic protocols which do not even offer basic authentication (like the Modbus protocol [10]) these systems fall in the hands of attackers as soon as the attacker has network access.”
Creating a Weapon of Mass Disruption: Attacking Programmable Logic Controllers
Gjendemsjø, M. (2013) · NORA - Norwegian Open Research Archives · Cited by 8 · see citing works
Optimizing internet scanning for assessing industrial systems exposure
François, J., Lahmadi, A., Valentin, G., et al. (2016) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2016.7577111 · Cited by 7 · see citing works
“Even if the security of such systems has been empowered [6], the National Institute of Standards and Technologies (NIST) still recommends a strong separation of the industrial network from the corporate network and the Internet [7].”
BackgroundKey Factors in Industrial Control System Security
Chapman, J. P., Ofner, S., & Piotr, P. (2016) · Conference on Local Computer Networks · doi:10.1109/lcn.2016.90 · Cited by 7 · see citing works
“They argue that instead of implementing the protocol directly on a field device, it could also be implemented by a gateway and hence used without modifying any field devices [19].”
BackgroundVulnerabilities and measures on smart grid application in renewable energy
Sağıroğlu, Ş., Özbilen, A., & Çolak, İ. (2012) · International Conference on Renewable Energy Research and Applications (ICRERA) · doi:10.1109/icrera.2012.6477421 · Cited by 7 · see citing works
FL‐ADS: Federated learning anomaly detection system for distributed energy resource networks
Purohit, S., Govindarasu, M., & Blakely, B. (2025) · IET Cyber-Physical Systems Theory & Applications · doi:10.1049/cps2.70001 · Cited by 6 · see citing works
Fagundes, F. D., & da Cunha, M. J. (2022) · Journal of Control Automation and Electrical Systems · doi:10.1007/s40313-021-00889-5 · Cited by 6 · see citing works
“Due to the encryption present in Secure Modbus, it is possible to prevent the Man-in-the-Middle attack described as an HB Modbus limitation.”
BackgroundMethodInfluentialTrusted Industrial Modbus Firewall for Critical Infrastructure Systems
Stancu, F. A., Rughinis, R. V., Tranca, D. C., & Popescu, I. L. (2020) · RoEduNet Conference: Networking in Education and Research (RoEduNet) · doi:10.1109/roedunet51892.2020.9324884 · Cited by 6 · see citing works
Intelligent Metering Innovations for Urban Utility Management: A Review
Sivadevuni, S. S., Maiya, R., Ganesh, D., et al. (2023) · International Conference on Automation, Computing and Renewable Systems (ICACRS) · doi:10.1109/icacrs58579.2023.10405137 · Cited by 6 · see citing works
Business Management and Strategy in Cybersecurity for Digital Transformation
Özsungur, F. (2021) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-7998-6975-7.ch008 · Cited by 6 · see citing works
MODLSTM: A Method to Recognize DoS Attacks on Modbus/TCP
Zhang, H., Min, Y., Liu, S., Tong, H., & Li, Y. (2022) · IEEE International Performance, Computing, and Communications Conference · doi:10.1109/ipccc55026.2022.9894305 · Cited by 6 · see citing works
“Fovino et al. integrated integrity, authentication, non-repudiation, and anti-replay mechanisms to implement a Modbus-safe version for SCADA, and verified the availability of the protocol in a real-world environment in a power plant [15].”
BackgroundFerst, M. K., Weber Denardin, G., Marcelo de Oliveira Stein, C., Giovani Carati, E., Patric da Costa, J., & Cardoso, R. (2025) · IEEE Access · doi:10.1109/access.2025.3577972 · Cited by 5 · see citing works
Load Altering Attacks- a Review of Impact and Mitigation Strategies
Mahrukh, M., & Thomas, M. S. (2023) · doi:10.1109/reedcon57544.2023.10150456 · Cited by 5 · see citing works
“A Man in the middle attack [23] can be created in the SCADA and RTUs or PLCs to access information about network topology to inflict an attack on the plant.”
BackgroundConnection Time in Modbus/TLS for Secure Communications on Photovoltaic Systems
Ferst, M. K., de Figueiredo, H. F. M., & Denardin, G. W. (2019) · doi:10.1109/cobep/spec44138.2019.9065406 · Cited by 5 · see citing works
“The original Modbus serial transmission has intrinsic isolation between the enterprise level and the control level of an industry network [12] and therefore ensuring the physical security of the perimeter where the system operates should be a sufficient measure to mitigate the protocol flaws [10].”
BackgroundA lightweight key generation scheme for end-to-end data authentication in Industrial Control Systems
Genge, B., Haller, P., Duka, A.-V., & Sándor, H. (2019) · at - Automatisierungstechnik · doi:10.1515/auto-2019-0017 · Cited by 4 · see citing works
Ultra-Low Latency Security Hardening of Modbus/TCP Protocol Based on ZUC Cryptographic Algorithm
Zhang, D., Gao, Y., Pan, Q., & Yang, C. (2024) · IEEE International Conference on Information, Communication and Networks (ICICN) · doi:10.1109/icicn62625.2024.10761885 · Cited by 4 · see citing works
“Security enhancements for the Modbus/TCP protocol may be broadly classified into two categories, namely anomaly detection-based defense schemes [8]-[13] and cryptography-based security enhancing schemes [2][3][4].”
InfluentialInvestigation of a Novel Approach to Securing Data Exchanges Within Industrial Environments
Slunjski, M. (2025) · IEEE Access · doi:10.1109/access.2025.3554983 · Cited by 4 · see citing works
“In [25], the Modbus structure was extended with the Secure Hash Algorithm 2, RSA signature, and Network Time Protocol stamps, while in [26], extensions were achieved by combining hash-based message authentication codes and stream transmission control protocol with the original Mod-bus structure.”
InfluentialA novel vulnerability index to select measurements for defense against false data injection attacks
Sreeram, T. S., & Krishna, S. (2022) · International Journal of Electrical Power & Energy Systems · doi:10.1016/j.ijepes.2022.108626 · Cited by 4 · see citing works
Design and Development of Secure Data Transfer Modules in Industrial Control Systems
Rajesh, L., & Satyanarayana, P. (2023) · Wireless Personal Communications · doi:10.1007/s11277-023-10738-0 · Cited by 4 · see citing works
Probabilistic Modeling and Study of Cybersecurity Attacks in Industrial Control Systems of Plants
Sibai, F. N., Mohammad, N., & Muhammad, S. (2020) · IEEE Conference on Application, Information and Network Security (AINS) · doi:10.1109/ains50155.2020.9314992 · Cited by 5 · see citing works
Formally Verifying Flow Properties in Industrial Systems
Dreier, J., Puys, M., Potet, M.-L., Lafourcade, P., & Roch, J.-L. (2017) · International Joint Conference on e-Business and Telecommunications (ICETE) · doi:10.5220/0006396500550066 · Cited by 4 · see citing works
“In (Fovino et al., 2009 proposed a version of MODBUS based on well-known cryptographic primitives such as RSA and SHA2.”
BackgroundMethodInfluentialZero Trust in the Context of the Utility Industry
Kumar, N., & LaRoy, N. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-63092-8_65 · Cited by 3 · see citing works
Shim, K., Sohn, I., Lee, E., Seok, W., & Lee, W. (2021) · Journal of Web Engineering · doi:10.13052/jwe1540-9589.2011 · Cited by 3 · see citing works
MQTT-Based Android Chat Application for IoT
Anne, L., Nandan, T., Kunj, M., et al. (2022) · SN Computer Science · doi:10.1007/s42979-022-01278-8 · Cited by 3 · see citing works
Verifying the Computational Integrity of Power Grid Controls with Zero-Knowledge Proof
Chang, C.-Y., Macwan, R., & Murphy, S. (2023) · IEEE Power Engineering Society General Meeting · doi:10.1109/pesgm52003.2023.10253173 · Cited by 3 · see citing works
Security Analysis and Enhancement of INTERBUS Protocol in ICS Based on Colored Petri Net
Feng, T., Liu, C., Gong, X., & Lu, Y. (2023) · Information · doi:10.3390/info14110589 · Cited by 3 · see citing works
Modbus Data Provider for Automation Researcher Using C#Preprint
Chakraborty, S., & Aithal, P. S. (2023) · SSRN Electronic Journal · doi:10.2139/ssrn.4562426 · Cited by 3 · see citing works
Remote Control and Monitoring Protocols for PLC and HMI Systems: A Case Study of MODBUS, WMI and VNC
Aykut, E., Erdoğan, K., Benlі, S. N., Mumcu, M. C., & Yavuz, İ. (2025) · International Symposium on Innovative Approaches in Smart Technologies (ISAS) · doi:10.1109/isas66241.2025.11101982 · Cited by 2 · see citing works
“The start addresses and the number of records to be read are specified in the request message and the sensor data is sent in 16-bit format with the response message [21].”
Autonomous Cyber Resilience via a Co-Evolutionary Arms Race within a Fortified Digital Twin Sandbox
Malikussaid, & Sutiyo (2025) · International Symposium on Intelligent Signal Processing and Communication Systems (ISPACS) · doi:10.1109/ispacs68724.2025.11383172 · Cited by 2 · see citing works
“For much of the 20th century, the design philosophy of ICS was rooted entirely in the principles of safety and reliability engineering.”
A Test Cases Generation Method for Industrial Control Protocol Test
Shang, W., Zhang, G., Wang, T., & Zhang, R. (2021) · Scientific Programming · doi:10.1155/2021/6611732 · Cited by 2 · see citing works
- Authors
- Fovino, I. N., Carcano, A., Masera, M., & Trombetta, A.
- Affiliations
- University of Insubria (IT)
- Venue
- IFIP Advances in Information and Communication Technology
- Publisher
- Springer Berlin Heidelberg
- Published
- 2009
- Pages
- 83-96
- ISSN
- 1868-422X (ISSN-L)
- 1868-4238
- OpenAlex
- W2102662195
- Semantic Scholar
- 6f6e477a9e2bcafcc94f5b13cf8cbf6ab694ecc7
- Cited by
- 138
- References
- 20
- Citations by year
- 2026: 5 · 2025: 8 · 2024: 6 · 2023: 20 · 2022: 15 · 2021: 12 · 2020: 11 · 2019: 11 · 2018: 18 · 2017: 9 · 2016: 7 · 2015: 1 · 2014: 3 · 2013: 7 · 2012: 2
- FWCI
- 2.79
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- IFIP advances in information and communication technology (publishedVersion)
- Joint Research Centre (European Commission) (submittedVersion)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Control and Systems Engineering › Industrial Automation and Control Systems
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Keywords
- Modbus, SCADA security, authentication, non-repudiation, critical infrastructure protection
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
