The DOI matches its Crossref record; 19 of the 20 references it cites were found in a registry or an index.
Design and Implementation of a Secure Modbus Protocol
Open accessOverview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The cited source says what the claim attributes to it.
In the citing paper
“Our solution overheads only 1.6% time delay compared to 66% time delay or latency as per [51].It adds 4% overhead on frame size, compared to 291% as per [33].”
From Detection and Blocking of Replay, False Command, and False Access Injection Commands in SCADA Systems with Modbus Protocol (2021) · cites this paper as [33]
The cited source says what the claim attributes to it.
In the citing paper
“It adds 4% overhead on frame size, compared to 291% as per [33].”
From Detection and Blocking of Replay, False Command, and False Access Injection Commands in SCADA Systems with Modbus Protocol (2021) · cites this paper as [33]
The cited source says what the claim attributes to it.
In the citing paper
“However, both of these works do not consider the confidentiality requirement for Modbus messages, as they are usually implemented using cryptography, which is expensive and presents a considerable overhead that can affect the performance in real-time communication [15,16].”
From Enhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported (2022) · cites this paper as [15]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
A method for obtaining digital signatures and public-key cryptosystems
Rivest, R. L., Shamir, A., & Adleman, L. (1978) · Communications of the ACM · doi:10.1145/359340.359342 · Cited by 13,462
A method for obtaining digital signatures and public-key cryptosystems
Rivest, R. L., Shamir, A., & Adleman, L. (1983) · Communications of the ACM · doi:10.1145/357980.358017 · Cited by 13,012
Computer Security: Art and Science
Bishop, M. (2002) · Cited by 1,234
Attack taxonomies for the Modbus protocols
Huitsing, P., Chandia, R., Papa, M., & Shenoi, S. (2008) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2008.08.003 · Cited by 249
Security Strategies for SCADA Networks
Chandia, R., Gonzalez, J., Kilpatrick, T., Papa, M., & Shenoi, S. (2007) · Springer eBooks · doi:10.1007/978-0-387-75462-8_9 · Cited by 87
Security Vulnerabilities in Software Systems: A Quantitative Perspective
Alhazmi, O. H., Malaiya, Y. K., & Ray, I. (2005) · Lecture notes in computer science · doi:10.1007/11535706_21 · Cited by 75
Low-Latency Cryptographic Protection for SCADA Communications
Wright, A. K., Kinast, J. A., & McCarty, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24852-1_19 · Cited by 69
Critical Infrastructure Protection II
Papa, M., & Shenoi, S. (2009) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-0-387-88523-0 · Cited by 59
Industrial cybersecurity for a power system and SCADA networks - Be secure
Creery, A., & Byres, E. J. (2007) · IEEE Industry Applications Magazine · doi:10.1109/mia.2007.4283509 · Cited by 49
Risk Management for Computer Security: Protecting Your Network & Information Assets
Jones, A., & Ashenden, D. (2005) · Butterworth-Heinemann eBooks · Cited by 48
Research works printed but not linked: 2
- M. Majdalawieh, F. Parisi-Presicce and D. Wijesekera, DNPSec: Distributed Network Protocol Version 3 security framework, presented at the Twenty-First Annual Computer Security Applications Conference (Technology Blitz Session), 2005.
- M. Wiener, H. Handschuh, P. Pallier, R. Rivest, E. Biham and L. Knudsen, Performance comparison of public-key cryptosystems, smartcard crypto-coprocessors for public-key cryptography, chaffing and winnowing: Confidentiality without encryption, DES, Triple-DES and AES, CryptoBytes, vol. 4(1), 1998.
Cited by
Sorted by citations
Cyber–Physical System Security for the Electric Power Grid
Sridhar, S., Hahn, A., & Govindarasu, M. (2011) · Proceedings of the IEEE · doi:10.1109/jproc.2011.2165269 · Cited by 1,219
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185
A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics
Pliatsios, D., Sarigiannidis, P., Lagkas, T., & Sarigiannidis, A. G. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.2987688 · Cited by 320
“Authors in [102] describe a modified version of the Modbus protocol that utilizes anti-replay techniques and authentication mechanisms.”
BackgroundIntegration of IoT in building energy infrastructure: A critical review on challenges and solutions
Moudgil, V., Hewage, K., Hussain, S. A., & Sadiq, R. (2022) · Renewable and Sustainable Energy Reviews · doi:10.1016/j.rser.2022.113121 · Cited by 124
Security Challenges in Control Network Protocols: A Survey
Volkova, A., Niedermeier, M., Basmadjian, R., & de Meer, H. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2872114 · Cited by 118
“, in [28] (referred to as Modbus-F2009 from here on), [29] (referred to as Modbus-S2015 from here on), and [30] (referred to as Modbus-A2018 from here on).”
BackgroundAutonomous mitigation of cyber risks in the Cyber–Physical Systems
Kholidy, H. A. (2020) · Future Generation Computer Systems · doi:10.1016/j.future.2020.09.002 · Cited by 100
Alves, T., Das, R., & Morris, T. H. (2018) · IEEE Embedded Systems Letters · doi:10.1109/les.2018.2823906 · Cited by 91
Review on cyber vulnerabilities of communication protocols in industrial control systems
Xu, Y., Yang, Y., Li, T., Ju, J., & Wang, Q. (2017) · IEEE Conference on Energy Internet and Energy System Integration (EI2) · doi:10.1109/ei2.2017.8245509 · Cited by 90
An experimental platform for assessing SCADA vulnerabilities and countermeasures in power plants
Fovino, I. N., Masera, M., Guidi, L., & Carpi, G. (2010) · Conference on Human System Interactions · doi:10.1109/hsi.2010.5514494 · Cited by 86
Self-citationShahzad, A., Lee, M., Lee, Y.-K., Kim, S., Xiong, N., Choi, J.-Y., & Cho, Y. (2015) · Symmetry · doi:10.3390/sym7031176 · Cited by 86
Industrial control systems security: What is happening?
Krotofil, M., & Gollmann, D. (2013) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2013.6622964 · Cited by 74
“In the scenario presented, the attacker issues bogus Modbus packets to three different valves at a boiling plant trying to keep them in a certain position.”
BackgroundCyber security threats — Smart grid infrastructure
Pandey, R. K., & Misra, M. (2016) · National Power Systems Conference · doi:10.1109/npsc.2016.7858950 · Cited by 71
“It is also possible to create “man-in-themiddle” attack [24] between the SCADA and the slave devices (RTUs or PLCs) to get information regarding the network topology and device functionality.”
BackgroundVosughi, A., Tamimi, A., King, A. B., Majumder, S., & Srivastava, A. K. (2022) · Renewable and Sustainable Energy Reviews · doi:10.1016/j.rser.2022.112794 · Cited by 58
Krotofil, M., Cárdenas, Á. A., Larsen, J., & Gollmann, D. (2014) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2014.10.003 · Cited by 57
“designing control-system-specific defenses such as intrusion detection systems [14,33,43], authentication and encryption schemes [32], access control [31], policy enforcement [29], code verification [30] and risk management [34].”
BackgroundSCADAWall: A CPI-enabled firewall model for SCADA security
Li, D., Guo, H., Zhou, J., Zhou, L., & Wong, J. W. (2018) · Computers & Security · doi:10.1016/j.cose.2018.10.002 · Cited by 53
Katulić, F., Sumina, D., Groš, S., & Erceg, I. (2023) · IEEE Access · doi:10.1109/access.2023.3275443 · Cited by 53
“With the analysis of the Modbus/TCP cybersecurity, possible cryptography-based solutions emerged, such as [16] in which the authors implemented RSA digital signatures for the authentication and a selected SHA-2 hash function for the integrity protection of Modbus/TCP.”
BackgroundMethodEnhanced Modbus/TCP Security Protocol: Authentication and Authorization Functions Supported
Martins, T., & Oliveira, S. V. G. (2022) · Sensors · doi:10.3390/s22208024 · Cited by 45
“A solution using integrity mechanisms through the SHA2 algorithm, authentication through RSA, and non-repudiation and anti-replay through the timestamp is presented in [15].”
Krotofil, M., Cárdenas, Á. A., Manning, B., & Larsen, J. (2014) · Annual Computer Security Applications Conference · doi:10.1145/2664243.2664290 · Cited by 40
“A large body of literature on Industrial Control Systems (ICS) security looks at intercepting and manipulating the tra c [29], infection by malware [3], access by unauthorized users [18] and addresses the threats by designing ICS-specific defenses such as intrusion detection systems [32, 13], authentication and encryp…”
BackgroundFormal security assessment of Modbus protocol
Nardone, R., Rodríguez, R. J., & Marrone, S. (2016) · International Conference for Internet Technology and Secured Transactions · doi:10.1109/icitst.2016.7856685 · Cited by 41
“[14] proposed an extension of Modbus protocol to support authentication, non-repudiation, and replay protection.”
BackgroundImplementation of Secure Communication With Modbus and Transport Layer Security protocols
Ferst, M. K., de Figueiredo, H. F. M., Denardin, G., & Lopes, J. (2018) · 2018 13th IEEE International Conference on Industry Applications (INDUSCON) · doi:10.1109/induscon.2018.8627306 · Cited by 41
“Some applications, especially those related to infrastructure assets, have a critical nature and a fault in these systems may lead to unrecoverable damages and losses, affecting general population [2].”
BackgroundMethodReaves, B., & Morris, T. H. (2012) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2012.10.001 · Cited by 37
A Systematic Literature Review on RAMS analysis for critical infrastructures protection
Pirbhulal, S., Gkioulos, V., & Katsikas, S. K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100427 · Cited by 37
Industrial control systems security: What is happening?
Krotofil, M., & Gollmann, D. (2013) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2013.6622963 · Cited by 35
A Stealthy False Command Injection Attack on Modbus based SCADA Systems
Alsabbagh, W., Amogbonjaye, S., Urrego, D., & Langendörfer, P. (2023) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc51644.2023.10059804 · Cited by 34
“An alternative solution would be using the modified version of the modbus protocol introduced in [31].”
MethodResearch and Implementation of Modbus TCP Security Enhancement Protocol
Luo, X., & Li, Y. (2019) · Journal of Physics Conference Series · doi:10.1088/1742-6596/1213/5/052058 · Cited by 34
L, R., & Satyanarayana, P. (2021) · Security and Communication Networks · doi:10.1155/2021/8887666 · Cited by 28
An integrated testbed for locally monitoring SCADA systems in smart grids
Chromik, J. J., Remke, A., & Haverkort, B. R. H. M. (2018) · Energy Informatics · doi:10.1186/s42162-018-0058-7 · Cited by 28
“Security extensions for Modbus/TCP protocol have been proposed, e.g., (Fovino et al. 2009; Shahzad et al. 2015; Éva et al. 2018), which, however, do require changes on the protocol level of operating devices.”
Probability Risk Identification Based Intrusion Detection System for SCADA Systems
Marsden, T., Moustafa, N., Sitnikova, E., et al. (2018) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-319-90775-8_28 · Cited by 27
“All information collected from packets is available as header information from the Application Data Unit (ADU) and Protocol Data Unit (PDU), this means that we can deploy this technique in realtime on an encrypted network [9].”
MethodTertytchny, G., Karbouj, H., Hadjidemetriou, L., Charalambous, C., Michael, M. K., Sazos, M., & Maniatakos, M. (2020) · IEEE CyberPELS (CyberPELS) · doi:10.1109/cyberpels49534.2020.9311531 · Cited by 28
“For example, as it is proposed by authors in [12], Modbus TCP is improved by changing its packet format representation using encryption and checksum schemes.”
MethodSecuring SCADA Applications Using OpenPLC With End-To-End Encryption
Alves, T., Morris, T., & Yoo, S.-M. (2017) · Proceedings of the 3rd Annual Industrial Control System Security Workshop · doi:10.1145/3174776.3174777 · Cited by 26
“The work put forth by Fovino [9] describes a secure version of the Modbus SCADA protocol that incorporates integrity, authentication, non-repudiation and anti-replay mechanisms.”
BackgroundYang, Y., Lee, S., Wang, J.-M., Yang, C.-S., Huang, Y.-M., & Hou, T. (2023) · Sensors · doi:10.3390/s23104970 · Cited by 34
“In today’s industrial environment, most data communications are conducted using the Modbus protocol [3].”
MethodAssessment of SCADA System Vulnerabilities
Yadav, G., & Paul, K. (2019) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa.2019.8869541 · Cited by 27
“The communication network protocols lack the support of security features [15].”
BackgroundFormal Analysis of Security Properties on the OPC-UA SCADA Protocol
Puys, M., Potet, M.-L., & Lafourcade, P. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-45477-1_6 · Cited by 24
“[10] proposed a secure version of MODBUS relying on well-known cryptographic primitives such as RSA and SHA2.”
MethodAuthentication of Smart Grid by Integrating QKD and Blockchain in SCADA Systems
Aggarwal, S., & Kaddoum, G. (2024) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2024.3423762 · Cited by 24
“The traditional SCADA system, relying on conventional protocols, like Modbus [32], faces significant challenges concerning security and privacy in smart grid communications.”
MethodAutomated and Secure Onboarding for System of Systems
Maksuti, S., Bicaku, A., Zsilak, M., Ivkić, I., Peceli, B., Singler, G., Kovács, K., Tauber, M., & Delsing, J. (2021) · IEEE Access · doi:10.1109/access.2021.3102280 · Cited by 27
“IEC 61850-9-2 Sampled Values (SV) [39], IEC 61850-8-1 Generic Object Oriented Substation Event (GOOSE) [40], Manufacturing Message Specification (MMS) [41], Modbus [42], etc., provide the core communication mechanisms for industrial environments such as power utilities, manufacturing, and transportation.”
Cyber‐Physical System Resilience
Haque, M. A., Shetty, S. S., & Krishnappa, B. (2019) · doi:10.1002/9781119552482.ch12 · Cited by 22
On the use of open-source firewalls in ICS/SCADA systems
Nivethan, J., & Papa, M. (2016) · Information Security Journal A Global Perspective · doi:10.1080/19393555.2016.1172283 · Cited by 20
“Even in cases where a PLC has the capability to white-list hosts by IP address, this PLC would still be exploitable (Fovino et al., 2009).”
BackgroundComparative analysis of the security of configuration protocols for industrial control devices
Martín-Liras, L., Prada, M. A., Fuertes, J. J., et al. (2017) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2017.10.001 · Cited by 20
Dynamic rule generation for SCADA intrusion detection
Nivethan, J., & Papa, M. (2016) · doi:10.1109/ths.2016.7568964 · Cited by 20
“The Modbus protocol does not verify the source of a command [19].”
BackgroundVulnerability assessment of industrial systems using Shodan
Alsmadi, I. M., Dwekat, Z. A., Cantu, R., et al. (2021) · Cluster Computing · doi:10.1007/s10586-021-03330-3 · Cited by 19
“Authors in [2] suggested a technique to provide security using shared keys.”
BackgroundMethodGenge, B., Haller, P., & Duka, A.-V. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.09.001 · Cited by 19
Demonstration of Man in the Middle Attack on a Feeder Power Factor Correction Unit
Hadjidemetriou, L., Tertytchny, G., Karbouj, H., Charalambous, C., Michael, M. K., Sazos, M., & Maniatakos, M. (2020) · IEEE PES Innovative Smart Grid Technologies Europe · doi:10.1109/isgt-europe47291.2020.9248779 · Cited by 18
“For instance, the authors in [10] improved Modbus protocol security by changing the packet format representation using encryption and checksum schemes such as SHA-2.”
BackgroundSlunjski, M., Sumina, D., Groš, S., & Erceg, I. (2022) · IEEE Access · doi:10.1109/access.2022.3217797 · Cited by 18
“In [19], the authors suggested an extension of Modbus protocol, which could rectify some main security downsides of the protocol.”
BackgroundSecuring industrial control system environments: the missing piece
Ani, U., Daniel, N., Oladipo, F. O., & Adewumi, S. E. (2018) · Journal of Cyber Security Technology · doi:10.1080/23742917.2018.1554985 · Cited by 17
“The authors in [108] pro ff ered a potential solution (adding security capabilities for integrity, authentication and anti-replay protection) that hinges success on the e ff ective preservation of secrecy of shared keys.”
BackgroundZhang, H., Min, Y., Liu, S., Tong, H., Li, Y., & Lv, Z. (2023) · Mobile Networks and Applications · doi:10.1007/s11036-023-02108-8 · Cited by 16
“…worked on enhancing the security of the Modbus protocol itself, they often use additional security fields or encryption to design the secure versions of Modbus, with representative work such as Fovino [9] and Liao [10]’s works, but such structural additions may cause some degree of efficiency loss.”
MethodSecure Cryptography Testbed Implementation for SCADA Protocols Security
Shahzad, A., Musa, S., Aborujilah, A., & Irfan, M. (2013) · International Conference on Advanced Computer Science Applications and Technologies · doi:10.1109/acsat.2013.69 · Cited by 15
“Security Solution1 successfully verified the security services such as authentication, integrity, confidentiality and non-repudiation, during SCADA communication.”
BackgroundCyber security issues of critical components for industrial control system
Yang, W., & Zhao, Q. (2014) · IEEE CSAA Guidance, Navigation and Control Conference (CGNCC) · doi:10.1109/cgncc.2014.7007593 · Cited by 15
“[43] presented a secure version of the Modbus SCADA protocol that incorporates integrity, authentication, non-repudiation and anti-replay mechanisms.”
Clustering method in protocol reverse engineering for industrial protocols
Shim, K., Goo, Y., Lee, M., & Kim, M. (2020) · International Journal of Network Management · doi:10.1002/nem.2126 · Cited by 15
“Modbus is a simple, effective, and free serial bus 27 wherein up to 247 nodes can be connected within the same link.”
BackgroundTAMBUS: A novel authentication method through covert channels for securing industrial networks
Bernieri, G., Cecconello, S., Conti, M., & Lain, G. (2020) · Computer Networks · doi:10.1016/j.comnet.2020.107583 · Cited by 14
Why Anomaly-Based Intrusion Detection Systems Have Not Yet Conquered the Industrial Market?
Seng, S., García-Alfaro, J., & Laarouchi, Y. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-08147-7_23 · Cited by 15
Drias, Z., Serhrouchni, A., & Vogel, O. (2017) · Cyber Security in Networking Conference (CSNet) · doi:10.1109/csnet.2017.8242008 · Cited by 12
“[12] FOVINO, Igor Nai, CARCANO, Andrea, MASERA, Marcelo, et al.”
BackgroundAn Overview of the Security of Programmable Logic Controllers in Industrial Control Systems
Cui, H., Hong, J. B., & Louden, R. (2024) · Encyclopedia · doi:10.3390/encyclopedia4020056 · Cited by 12
“Fovino et al. [55] found several vulnerabilities in the MODBUS protocol due to its lack of security-enhancing techniques.”
BackgroundLow-Cost Communication Interface between a Smart Meter and a Smart Inverter
Piggott, C. E., Caruso, Z., & Nenadic, N. G. (2023) · Energies · doi:10.3390/en16052358 · Cited by 11
Mismatched Control and Monitoring Frequencies: Vulnerability, Attack, and Mitigation
Yang, Z., He, L., Cheng, P., & Chen, J. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3384146 · Cited by 12
Design and Implementation of SAE J1939 and Modbus Communication Protocols for Electric Vehicle
Alzahrani, A., Wangikar, S. M., Indragandhi, V., et al. (2023) · Machines · doi:10.3390/machines11020201 · Cited by 11
Modbus Data Provider for Automation Researcher Using C#
Chakraborty, S., & Aithal, P. S. (2023) · International Journal of Case Studies in Business IT and Education · doi:10.47992/ijcsbe.2581.6942.0285 · Cited by 11
Proposal of a Secure Modbus RTU Communication with Adi Shamir's Secret Sharing Method
Ádámkó, É., Jakabóczki, G., & Szemes, P. T. (2018) · International Journal of Electronics and Telecommunications · doi:10.24425/119357 · Cited by 11
Rajesh, L., & Satyanarayana, P. (2019) · Helix · doi:10.29042/2019-5122-5127 · Cited by 11
Lin, X., Zhang, Y., Huang, C., Xing, B., Chen, L., Hu, D., & Chen, Y. (2023) · Sensors · doi:10.3390/s23073443 · Cited by 10
“It is responsible for communicating with IoT devices using dedicated structured protocols (e.g., mqtt [37], modbus [38], etc.) and invoking smart contracts deployed on the blockchain to authenticate the requester’s access token to reduce security issues caused by a large number of IoT devices…”
BackgroundPham, L. N. H. (2022) · Energies · doi:10.3390/en16010042 · Cited by 10
Process-aware SCADA traffic monitoring : a local approach
Chromik, J. J. (2019) · doi:10.3990/1.9789036548014 · Cited by 10
Security Enhancement Mechanism of Modbus TCP Protocol
Luo, X., & Li, Y. (2019) · DEStech Transactions on Computer Science and Engineering · doi:10.12783/dtcse/iciti2018/29146 · Cited by 9
Detecting Flooding Attacks in Communication Protocol of Industrial Control Systems
Rajesh, L., & Satyanarayana, P. (2020) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2020.0110149 · Cited by 9
Vaagensmith, B. C., Singh, V. K., Ivans, R. C., Marino, D. L., Wickramasinghe, C. S., Lehmer, J. P., Phillips, T., Rieger, C. G., & Manic, M. (2021) · Energies · doi:10.3390/en14051409 · Cited by 9
Efficient Group-Key Management for Low-bandwidth Smart Grid Networks
Hanna, Y., Cebe, M., Mercan, S., & Akkaya, K. (2021) · 2021 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm) · doi:10.1109/smartgridcomm51999.2021.9631988 · Cited by 8
IoT devices deployment challenges and studies in building management system
Chan, R., Yan, W. K., Ma, J. M., et al. (2023) · Frontiers in the Internet of Things · doi:10.3389/friot.2023.1254160 · Cited by 8
Niu, X., Cook, M. M., & Pezaros, D. P. (2024) · doi:10.1145/3642974.3652287 · Cited by 8
Security Issues and Mitigation in Ethernet POWERLINK
Yung, J., Debar, H., & Granboulan, L. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-61437-3_6 · Cited by 8
Formally and practically verifying flow properties in industrial systems
Dreier, J., Puys, M., Potet, M.-L., Lafourcade, P., & Roch, J.-L. (2018) · Computers & Security · doi:10.1016/j.cose.2018.09.018 · Cited by 8
A Malware-Tolerant, Self-Healing Industrial Control System Framework
Denzel, M., Ryan, M. D., & Ritter, E. (2017) · IFIP advances in information and communication technology · doi:10.1007/978-3-319-58469-0_4 · Cited by 8
“In combination with historic protocols which do not even offer basic authentication (like the Modbus protocol [10]) these systems fall in the hands of attackers as soon as the attacker has network access.”
Creating a Weapon of Mass Disruption: Attacking Programmable Logic Controllers
Gjendemsjø, M. (2013) · NORA - Norwegian Open Research Archives · Cited by 8
Optimizing internet scanning for assessing industrial systems exposure
François, J., Lahmadi, A., Valentin, G., et al. (2016) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2016.7577111 · Cited by 7
“Even if the security of such systems has been empowered [6], the National Institute of Standards and Technologies (NIST) still recommends a strong separation of the industrial network from the corporate network and the Internet [7].”
BackgroundKey Factors in Industrial Control System Security
Chapman, J. P., Ofner, S., & Piotr, P. (2016) · Conference on Local Computer Networks · doi:10.1109/lcn.2016.90 · Cited by 7
“They argue that instead of implementing the protocol directly on a field device, it could also be implemented by a gateway and hence used without modifying any field devices [19].”
BackgroundVulnerabilities and measures on smart grid application in renewable energy
Sağıroğlu, Ş., Özbilen, A., & Çolak, İ. (2012) · International Conference on Renewable Energy Research and Applications (ICRERA) · doi:10.1109/icrera.2012.6477421 · Cited by 7
FL‐ADS: Federated learning anomaly detection system for distributed energy resource networks
Purohit, S., Govindarasu, M., & Blakely, B. (2025) · IET Cyber-Physical Systems Theory & Applications · doi:10.1049/cps2.70001 · Cited by 6
Fagundes, F. D., & da Cunha, M. J. (2022) · Journal of Control Automation and Electrical Systems · doi:10.1007/s40313-021-00889-5 · Cited by 6
“Due to the encryption present in Secure Modbus, it is possible to prevent the Man-in-the-Middle attack described as an HB Modbus limitation.”
BackgroundMethodInfluentialTrusted Industrial Modbus Firewall for Critical Infrastructure Systems
Stancu, F. A., Rughinis, R. V., Tranca, D. C., & Popescu, I. L. (2020) · RoEduNet Conference: Networking in Education and Research (RoEduNet) · doi:10.1109/roedunet51892.2020.9324884 · Cited by 6
Intelligent Metering Innovations for Urban Utility Management: A Review
Sivadevuni, S. S., Maiya, R., Ganesh, D., et al. (2023) · International Conference on Automation, Computing and Renewable Systems (ICACRS) · doi:10.1109/icacrs58579.2023.10405137 · Cited by 6
Business Management and Strategy in Cybersecurity for Digital Transformation
Özsungur, F. (2021) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-7998-6975-7.ch008 · Cited by 6
MODLSTM: A Method to Recognize DoS Attacks on Modbus/TCP
Zhang, H., Min, Y., Liu, S., Tong, H., & Li, Y. (2022) · IEEE International Performance, Computing, and Communications Conference · doi:10.1109/ipccc55026.2022.9894305 · Cited by 6
“Fovino et al. integrated integrity, authentication, non-repudiation, and anti-replay mechanisms to implement a Modbus-safe version for SCADA, and verified the availability of the protocol in a real-world environment in a power plant [15].”
BackgroundFerst, M. K., Weber Denardin, G., Marcelo de Oliveira Stein, C., Giovani Carati, E., Patric da Costa, J., & Cardoso, R. (2025) · IEEE Access · doi:10.1109/access.2025.3577972 · Cited by 5
Load Altering Attacks- a Review of Impact and Mitigation Strategies
Mahrukh, M., & Thomas, M. S. (2023) · doi:10.1109/reedcon57544.2023.10150456 · Cited by 5
“A Man in the middle attack [23] can be created in the SCADA and RTUs or PLCs to access information about network topology to inflict an attack on the plant.”
BackgroundConnection Time in Modbus/TLS for Secure Communications on Photovoltaic Systems
Ferst, M. K., de Figueiredo, H. F. M., & Denardin, G. W. (2019) · doi:10.1109/cobep/spec44138.2019.9065406 · Cited by 5
“The original Modbus serial transmission has intrinsic isolation between the enterprise level and the control level of an industry network [12] and therefore ensuring the physical security of the perimeter where the system operates should be a sufficient measure to mitigate the protocol flaws [10].”
BackgroundA lightweight key generation scheme for end-to-end data authentication in Industrial Control Systems
Genge, B., Haller, P., Duka, A.-V., & Sándor, H. (2019) · at - Automatisierungstechnik · doi:10.1515/auto-2019-0017 · Cited by 4
Ultra-Low Latency Security Hardening of Modbus/TCP Protocol Based on ZUC Cryptographic Algorithm
Zhang, D., Gao, Y., Pan, Q., & Yang, C. (2024) · IEEE International Conference on Information, Communication and Networks (ICICN) · doi:10.1109/icicn62625.2024.10761885 · Cited by 4
“Security enhancements for the Modbus/TCP protocol may be broadly classified into two categories, namely anomaly detection-based defense schemes [8]-[13] and cryptography-based security enhancing schemes [2][3][4].”
InfluentialInvestigation of a Novel Approach to Securing Data Exchanges Within Industrial Environments
Slunjski, M. (2025) · IEEE Access · doi:10.1109/access.2025.3554983 · Cited by 4
“In [25], the Modbus structure was extended with the Secure Hash Algorithm 2, RSA signature, and Network Time Protocol stamps, while in [26], extensions were achieved by combining hash-based message authentication codes and stream transmission control protocol with the original Mod-bus structure.”
InfluentialColetta, A. (2018) · doi:10.5121/csit.2018.80105 · Cited by 4
A novel vulnerability index to select measurements for defense against false data injection attacks
Sreeram, T. S., & Krishna, S. (2022) · International Journal of Electrical Power & Energy Systems · doi:10.1016/j.ijepes.2022.108626 · Cited by 4
Design and Development of Secure Data Transfer Modules in Industrial Control Systems
Rajesh, L., & Satyanarayana, P. (2023) · Wireless Personal Communications · doi:10.1007/s11277-023-10738-0 · Cited by 4
Probabilistic Modeling and Study of Cybersecurity Attacks in Industrial Control Systems of Plants
Sibai, F. N., Mohammad, N., & Muhammad, S. (2020) · IEEE Conference on Application, Information and Network Security (AINS) · doi:10.1109/ains50155.2020.9314992 · Cited by 5
Formally Verifying Flow Properties in Industrial Systems
Dreier, J., Puys, M., Potet, M.-L., Lafourcade, P., & Roch, J.-L. (2017) · International Joint Conference on e-Business and Telecommunications (ICETE) · doi:10.5220/0006396500550066 · Cited by 4
“In (Fovino et al., 2009 proposed a version of MODBUS based on well-known cryptographic primitives such as RSA and SHA2.”
BackgroundMethodInfluentialZero Trust in the Context of the Utility Industry
Kumar, N., & LaRoy, N. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-63092-8_65 · Cited by 3
Shim, K., Sohn, I., Lee, E., Seok, W., & Lee, W. (2021) · Journal of Web Engineering · doi:10.13052/jwe1540-9589.2011 · Cited by 3
MQTT-Based Android Chat Application for IoT
Anne, L., Nandan, T., Kunj, M., et al. (2022) · SN Computer Science · doi:10.1007/s42979-022-01278-8 · Cited by 3
Verifying the Computational Integrity of Power Grid Controls with Zero-Knowledge Proof
Chang, C.-Y., Macwan, R., & Murphy, S. (2023) · IEEE Power Engineering Society General Meeting · doi:10.1109/pesgm52003.2023.10253173 · Cited by 3
Security Analysis and Enhancement of INTERBUS Protocol in ICS Based on Colored Petri Net
Feng, T., Liu, C., Gong, X., & Lu, Y. (2023) · Information · doi:10.3390/info14110589 · Cited by 3
Modbus Data Provider for Automation Researcher Using C#Preprint
Chakraborty, S., & Aithal, P. S. (2023) · SSRN Electronic Journal · doi:10.2139/ssrn.4562426 · Cited by 3
Remote Control and Monitoring Protocols for PLC and HMI Systems: A Case Study of MODBUS, WMI and VNC
Aykut, E., Erdoğan, K., Benlі, S. N., Mumcu, M. C., & Yavuz, İ. (2025) · International Symposium on Innovative Approaches in Smart Technologies (ISAS) · doi:10.1109/isas66241.2025.11101982 · Cited by 2
“The start addresses and the number of records to be read are specified in the request message and the sensor data is sent in 16-bit format with the response message [21].”
Autonomous Cyber Resilience via a Co-Evolutionary Arms Race within a Fortified Digital Twin Sandbox
Malikussaid, & Sutiyo (2025) · International Symposium on Intelligent Signal Processing and Communication Systems (ISPACS) · doi:10.1109/ispacs68724.2025.11383172 · Cited by 2
“For much of the 20th century, the design philosophy of ICS was rooted entirely in the principles of safety and reliability engineering.”
A Test Cases Generation Method for Industrial Control Protocol Test
Shang, W., Zhang, G., Wang, T., & Zhang, R. (2021) · Scientific Programming · doi:10.1155/2021/6611732 · Cited by 2
Metadata
- Authors
- Fovino, I. N., Carcano, A., Masera, M., & Trombetta, A.
- Affiliations
- University of Insubria (IT)
- Venue
- IFIP Advances in Information and Communication Technology
- Publisher
- Springer Berlin Heidelberg
- Published
- 2009
- Pages
- 83-96
- ISSN
- 1868-422X (ISSN-L)
- 1868-4238
- OpenAlex
- W2102662195
- Semantic Scholar
- 6f6e477a9e2bcafcc94f5b13cf8cbf6ab694ecc7
- Cited by
- 138
- References
- 20
- Citations by year
- 2026: 5 · 2025: 8 · 2024: 6 · 2023: 20 · 2022: 15 · 2021: 12 · 2020: 11 · 2019: 11 · 2018: 18 · 2017: 9 · 2016: 7 · 2015: 1 · 2014: 3 · 2013: 7 · 2012: 2
- FWCI
- 2.79
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- IFIP advances in information and communication technology (publishedVersion)
- Joint Research Centre (European Commission) (submittedVersion)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Control and Systems Engineering › Industrial Automation and Control Systems
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Keywords
- Modbus, SCADA security, authentication, non-repudiation, critical infrastructure protection
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review