Implementation and Analysis of a Secure Communication with SunSpec Modbus and Transport Layer Security Protocols for Short-Term Energy Management Systems
Open accessAbstract
The growth of Renewable Distributed Generations (RDG) presents both a solution to common problems of traditional energy sources - such as the environmental impact and losses in transmission and distribution - and a challenge to appropriately control a large number of Distributed Energy Resources (DERs). The feasibility of such control depends on adequate communication protocols that, among other features, must address the security requirements of DER applications. This paper analyses the impact of a TLS-based SunSpec Modbus implementation on connection time and bulk data transfer when applied to short-term energy management systems. The protocol was tested with synthetic benchmarks, like the PI-MBUS-300, and was also deployed to the pilot-scaled short-term energy management system in the Pato Branco campus of the Federal University of Technology – Paraná. The results should be sufficient to characterize Modbus/TLS in normal operation with multiple cipher suites, as well as under abnormal situations that may cause frequent reconnections, like an unstable network.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Modbus/TCP with TLS provides a standards-based security layer that ensures integrity and supports authentication.
“The main advantage of Modbus/TCP with TLS is that it provides a standards-based security layer, ensuring integrity and supporting authentication [21].”
From Encryption for Industrial Control Systems: A Survey of Application-Level and Network-Level Approaches in Smart Grids (2026) · cites this paper as [21]
Enforcing TLS on SunSpec Modbus/TCP embedded controllers increases average per-request latency from around 1 ms to approximately 1.6-1.8 ms, depending on the cipher suite.
“Recent measurements of Sun-Spec Modbus/TCP over TLS on embedded controllers report that enforcing TLS increases average per-request latency from around 1 ms to approximately 1.6-1.8ms, depending on the cipher suite [21].”
From Encryption for Industrial Control Systems: A Survey of Application-Level and Network-Level Approaches in Smart Grids (2026) · cites this paper as [21]
Cites
Hatziargyriou, N. D., Asano, H., Iravani, R., & Marnay, C. (2007) · IEEE Power and Energy Magazine · doi:10.1109/mpae.2007.376583 · Cited by 2,549 · see citing works
The Transport Layer Security (TLS) Protocol Version 1.2
Dierks, T., & Rescorla, E. K. (2008) · doi:10.17487/rfc5246 · Cited by 1,577 · see citing works
Distributed Power-Generation Systems and Protection
Blaabjerg, F., Yang, Y., Yang, D., & Wang, X. (2017) · Proceedings of the IEEE · doi:10.1109/jproc.2017.2696878 · Cited by 676 · see citing works
Demirok, E., González, P. C., Frederiksen, K. H. B., Sera, D., Rodriguez, P., & Teodorescu, R. (2011) · IEEE Journal of Photovoltaics · doi:10.1109/jphotov.2011.2174821 · Cited by 530 · see citing works
(2020) · doi:10.1109/ieeestd.2020.9069495 · Cited by 360 · see citing works
A brief review on microgrids: Operation, applications, modeling, and control
Shahgholian, G. (2021) · International Transactions on Electrical Energy Systems · doi:10.1002/2050-7038.12885 · Cited by 285 · see citing works
TCP SYN Flooding Attacks and Common Mitigations
Eddy, W. M. (2007) · doi:10.17487/rfc4987 · Cited by 276 · see citing works
A Comprehensive Assessment of PV Hosting Capacity on Low-Voltage Distribution Systems
Torquato, R. J. S., Salles, D., Pereira, C. O., Meira, P. C. M., & Freitas, W. (2018) · IEEE Transactions on Power Delivery · doi:10.1109/tpwrd.2018.2798707 · Cited by 273 · see citing works
Attack taxonomies for the Modbus protocols
Huitsing, P., Chandia, R., Papa, M., & Shenoi, S. (2008) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2008.08.003 · Cited by 249 · see citing works
Eid, B. M., Rahim, N. A., Selvaraj, J. A.-L., & Elkhateb, A. (2014) · IEEE Systems Journal · doi:10.1109/jsyst.2013.2296075 · Cited by 188 · see citing works
Elliptic Curve Cryptography (ECC) Brainpool Standard Curves and Curve Generation
Lochter, M., & Merkle, J. (2010) · doi:10.17487/rfc5639 · Cited by 149 · see citing works
Design and Implementation of a Secure Modbus Protocol
Fovino, I. N., Carcano, A., Masera, M., & Trombetta, A. (2009) · IFIP Advances in Information and Communication Technology · doi:10.1007/978-3-642-04798-5_6 · Cited by 138 · see citing works
An experimental investigation of malware attacks on SCADA systems
Fovino, I. N., Carcano, A., Masera, M., & Trombetta, A. (2009) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2009.10.001 · Cited by 115 · see citing works
Hayes, G., & El-Khatib, K. (2013) · 2013 Third International Conference on Communications and Information Technology (ICCIT) · doi:10.1109/iccitechnology.2013.6579545 · Cited by 65 · see citing works
Feng, J., Zeng, B., Zhao, D., Wu, G., Liu, Z., & Zhang, J. (2017) · IEEE Access · doi:10.1109/access.2017.2745198 · Cited by 64 · see citing works
AES-CCM Cipher Suites for Transport Layer Security (TLS)
McGrew, D., & Bailey, D. (2012) · doi:10.17487/rfc6655 · Cited by 51 · see citing works
Nir, Y., Josefsson, S., & Pégourié-Gonnard, M. (2018) · doi:10.17487/rfc8422 · Cited by 46 · see citing works
Implementation of Secure Communication With Modbus and Transport Layer Security protocols
Ferst, M. K., de Figueiredo, H. F. M., Denardin, G., & Lopes, J. (2018) · 2018 13th IEEE International Conference on Industry Applications (INDUSCON) · doi:10.1109/induscon.2018.8627306 · Cited by 41 · see citing works
Johnson, J. D., Fox, B., Kaur, K. J., & Anandan, J. (2021) · IEEE Access · doi:10.1109/access.2021.3120304 · Cited by 39 · see citing works
Recommendations for Trust and Encryption in DER Interoperability Standards
Sandia National Labs., A., Obert, J., USDOE Office of Energy Efficiency and Renewable Energy (EERE), Kitu Systems, S. D., Sunspec Alliance, Cable Labs, L., Cordeiro, P., Johnson, J. D., Lum, G., Tansy, T., et al. (2019) · doi:10.2172/1761841 · Cited by 37 · see citing works
Fu, R., Lichtenwalner, M. E., & Johnson, T. J. (2023) · IEEE Access · doi:10.1109/access.2023.3324177 · Cited by 27 · see citing works
Erkek, İ., & Irmak, E. (2025) · IEEE Access · doi:10.1109/access.2025.3547672 · Cited by 21 · see citing works
Expansion Pressure: Energy Challenges in Brazil and Chile
Bezerra, B., Mocárquer, S., Barroso, L. A., & Hugh Rudnick, V. (2012) · IEEE Power and Energy Magazine · doi:10.1109/mpe.2012.2188665 · Cited by 19 · see citing works
Toghranegar, S., Rabiee, A., & Mohseni‐Bonab, S. M. (2023) · IEEE Access · doi:10.1109/access.2023.3252371 · Cited by 16 · see citing works
Global Progress Toward Renewable Electricity: Tracking the Role of Solar (Version 4)
Haegel, N. M., & Kurtz, S. (2024) · IEEE Journal of Photovoltaics · doi:10.1109/jphotov.2024.3450020 · Cited by 14 · see citing works
Lazaridis, G., Drosou, A., Chatzimisios, P., & Tzovaras, D. K. (2023) · IEEE Conference on Standards for Communications and Networking · doi:10.1109/cscn60443.2023.10453119 · Cited by 11 · see citing works
Nam, J.-H., Park, S., Cho, D.-I., Cho, Y.-J., & Moon, W.-S. (2025) · IEEE Access · doi:10.1109/access.2025.3544744 · Cited by 7 · see citing works
Majeed, I. B., & Nwulu, N. I. (2024) · IEEE Access · doi:10.1109/access.2024.3479885 · Cited by 6 · see citing works
Connection Time in Modbus/TLS for Secure Communications on Photovoltaic Systems
Ferst, M. K., de Figueiredo, H. F. M., & Denardin, G. W. (2019) · doi:10.1109/cobep/spec44138.2019.9065406 · Cited by 5 · see citing works
A Protocol-Agnostic DER Intrusion Detection System using an IEEE 1547-Enabled Digital Twin
Oentung, T., Fragkos, G., Johnson, J. D., & Sreekumar, K. P. (2024) · Resilience Week (RWS) · doi:10.1109/rws62797.2024.10799445 · Cited by 5 · see citing works
Ultra-Low Latency Security Hardening of Modbus/TCP Protocol Based on ZUC Cryptographic Algorithm
Zhang, D., Gao, Y., Pan, Q., & Yang, C. (2024) · IEEE International Conference on Information, Communication and Networks (ICICN) · doi:10.1109/icicn62625.2024.10761885 · Cited by 4 · see citing works
Towards a Testbed for Critical Industrial Systems: SunSpec Protocol on DER Systems as a Case Study
Mlot, E. G., Saldaña, J., & Rodríguez, R. J. (2022) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa52439.2022.9921522 · Cited by 3 · see citing works
A large-scale study of the impact of future unregulated EV charging on low voltage grids
Gerald, C. K., Schwalbe, R., Herndler, B., Taljan, G., & Aigner, M. (2025) · IET conference proceedings. · doi:10.1049/icp.2024.1920 · Cited by 3 · see citing works
Study on the Impact of Large-Scale Photovoltaic Integration on Grid Voltage
Guo, Y., Wu, H., Chen, X., Cui, C., Jiang, C., Ren, Y., Su, R., Fan, C., Yang, B., & Liu, Y. (2024) · International Conference on New Energy and Power Engineering (ICNEPE) · doi:10.1109/icnepe64067.2024.10860563 · Cited by 3 · see citing works
Impact of Large-Scale Solar Photovoltaic Integration on Weak Power Grids
Ugwuoke, N. C., Ugwuanyi, N. S., Obi, P. I., Ozioko, I. O., Uma, U. U., Ijeh, I. C., Nwogu, O. A., & Akuru, U. B. (2024) · IEEE PES/IAS PowerAfrica Conference (PowerAfrica) · doi:10.1109/powerafrica61624.2024.10759386 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Sunspec Modbus Based Smart Inverter Cyber-Attack Modeling and Mitigation Scheme
Aftab, M. A., Hussain, S. M. S., Farooq, S. M., Venkatraman, M. S., Ahmed, S., & Konstantinou, C. (2025) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2025.3611701 · Cited by 4 · see citing works
Narayanan, M., Hafeez, M. A., & Munir, A. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6010011 · Cited by 3 · see citing works
“Advantages: The main advantage of Modbus/TCP with TLS is that it provides a standards-based security layer, ensuring integrity and supporting authentication [21].”
InfluentialAn Efficient and Scalable Mutual Symmetric Key Establishment and Management for IoT Devices
Alfakeeh, A. S. (2025) · International Journal of Electronics and Communication Engineering · doi:10.14445/23488549/ijece-v12i7p119
Romero-Goytendia, L., Díaz-Aliaga, J., Velazco-Lorenzo, D., Loayza-Mejía, E., Piscoya-Silva, U., Santos, C., Solís-Farfán, R., Vara-Sanchez, J., Morcillo-Valdivia, P., Rodríguez-Aburto, C., et al. (2026) · Energies · doi:10.3390/en19143241
Privacy-preserving SCADA systems: a hybrid encryption approach
Guo, X., & Zhao, D. (2026) · The Journal of Supercomputing · doi:10.1007/s11227-026-08823-9
- Authors
- Ferst, M. K., Weber Denardin, G., Marcelo de Oliveira Stein, C., Giovani Carati, E., Patric da Costa, J., & Cardoso, R.
- Affiliations
- Instituto de Pesquisas Eldorado (BR)
- Department of Electrical Engineering, Federal University of Technology–Paraná, Pato Branco, Brazil
- Universidade Tecnológica Federal do Paraná (BR)
- ORCID
- Venue
- IEEE Access
- Published
- 2025
- Volume
- 13
- Pages
- 105183-105198
- ISSN
- 2169-3536 (ISSN-L)
- OpenAlex
- W4411142920
- Cited by
- 5
- References
- 37
- Citations by year
- 2026: 3 · 2025: 2
- FWCI
- 1.85
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Locations
- IEEE Access (publishedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Funders
- Research and Development Project granted by Brazilian Electricity Regulatory Agency (ANEEL) and Companhia Paranaense de Energia (PD 2866-0468/2017)
- Financiadora de Estudos e Projetos
- Secretaria de Estado da Ciência, Tecnologia e Ensino Superior do Paranã
- Conselho Nacional de Desenvolvimento Cientãfico e Tecnológico (405700/2021-0, 306633/2022-1, 444373/2024-1)
- Fundação Araucária
- Coordenação de Aperfeiçoamento de Pessoal de Nível Superior-CAPES (Research Organization Registry (ROR) identifier (00x0ma614)
- Universidade Tecnológica Federal do Paraná
- Novos Arranjos de Pesquisa e Inovação (NAPI) Sudoeste
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Electrical and Electronic Engineering › Power Systems and Technologies
- Physical Sciences › Engineering › Electrical and Electronic Engineering › Smart Grid and Power Systems
- Keywords
- Transport Layer Security, secure communication, distributed energy resources, distributed renewable energy, protocol security, cipher suites, connection time, bulk data transfer, network instability
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review