Cryptographic Considerations for Automation and SCADA Systems Using Trusted Platform Modules
Open accessAbstract
The increased number of cyber threats against the Supervisory Control and Data Acquisition (SCADA) and automation systems in the Industrial-Internet-of-Things (IIoT) and Industry 4.0 era has raised concerns in respect to the importance of securing critical infrastructures and manufacturing plants. The evolution towards interconnection and interoperability has expanded the vulnerabilities of these systems, especially in the context of the widely spread legacy standard protocols, by exposing the data to the outside network. After gaining access to the system data by launching a variety of attacks, an intruder can cause severe damage to the industrial process in place. Hence, this paper attempts to respond to the security issue caused by legacy structures using insecure communication protocols (e.g., Modbus TCP, DNP3, S7), presenting a different perspective focused on the capabilities of a trusted platform module (TPM). Furthermore, the intent is to assure the authenticity of the data transmitted between two entities on the same (horizontal interoperation) or different (vertical interoperation) hierarchical levels communicating through Modbus TCP protocol based on functionalities obtained by integrating trusted platform modules. From the experimental results perspective, the paper aims to show the advantages of integrating TPMs in automation/SCADA systems in terms of security. Two methods are proposed in order to assure the authenticity of the messages which are transmitted, respectively the study presents the measurements related to the increased time latency introduced due to the proposed concept.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Numerous solutions have been proposed enhancing SCADA security within various domains of implementation, such as cyber attacks on cloud SCADA systems, end-to-end encryption between SCADA and Open PLC, and fuzzing SCADA protocols in smart grids.
“Furthermore, numerous solutions have been proposed, enhancing SCADA security within various domain of implementation, such as cyber attacks on cloud SCADA systems [184], end-to-end encryption between SCADA and Open PLC [185], fuzzing SCADA protocols in smart grids [186],”
From SCADA Systems With Focus on Continuous Manufacturing and Steel Industry: A Survey on Architectures, Standards, Challenges and Industry 5.0 (2022) · cites this paper as [186]
Section 4 describes a proposed solution for securing communication in SCADA and automation systems, so the citation supports the broader point that a security solution was proposed. But Section 4.2 specifies authentication of messages between a master and slave, not end-to-end encryption between SCADA and Open PLC; Section 4.3 says the test nodes were Raspberry Pis emulating those devices. (LLM, conf=0.85)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Müller, J. M., Kiel, D., & Voigt, K. (2018) · Sustainability · doi:10.3390/su10010247 · Cited by 1,118 · see citing works
Towards an Optimized BlockChain for IoT
Dorri, A., Kanhere, S. S., & Jurdak, R. (2017) · Proceedings of the Second International Conference on Internet-of-Things Design and Implementation · doi:10.1145/3054977.3055003 · Cited by 752 · see citing works
Stuxnet worm impact on industrial cyber-physical system security
Karnouskos, S. (2011) · Annual Conference of the IEEE Industrial Electronics Society (IECON) · doi:10.1109/iecon.2011.6120048 · Cited by 542 · see citing works
Liang, G., Weller, S. R., Luo, F., Zhao, J., & Dong, Z. Y. (2018) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2018.2819663 · Cited by 429 · see citing works
A Lightweight Authentication Mechanism for M2M Communications in Industrial IoT Environment
Esfahani, A., Μαντάς, Γ., Matischek, R., Saghezchi, F. B., Rodrı́guez, J., Bicaku, A., Maksuti, S., Tauber, M., Schmittner, C., & Bastos, J. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2737630 · Cited by 340 · see citing works
A Systems Theoretic Approach to the Security Threats in Cyber Physical Systems Applied to Stuxnet
Nourian, A., & Madnick, S. (2015) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2015.2509994 · Cited by 213 · see citing works
Communication Protocols of an Industrial Internet of Things Environment: A Comparative Study
Jaloudi, S. (2019) · Future Internet · doi:10.3390/fi11030066 · Cited by 131 · see citing works
Salhaoui, M., González, A. G., Arioua, M., Ortiz, F. J., Oualkadi, A. E., & Bonet, C. T. (2019) · Sensors · doi:10.3390/s19153316 · Cited by 130 · see citing works
Security Challenges in Control Network Protocols: A Survey
Volkova, A., Niedermeier, M., Basmadjian, R., & de Meer, H. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2872114 · Cited by 118 · see citing works
Digital Manufacturing Platforms in the Industry 4.0 from Private and Public Perspectives
Gerrikagoitia, J. K., Unamuno, G., Urkia, E., & Serna, A. (2019) · Applied Sciences · doi:10.3390/app9142934 · Cited by 107 · see citing works
Bridging Service-Oriented Architecture and IEC 61499 for Flexibility and Interoperability
Dai, W., Vyatkin, V. V., Christensen, J. H., et al. (2015) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2015.2423495 · Cited by 106 · see citing works
Review on cyber vulnerabilities of communication protocols in industrial control systems
Xu, Y., Yang, Y., Li, T., Ju, J., & Wang, Q. (2017) · IEEE Conference on Energy Internet and Energy System Integration (EI2) · doi:10.1109/ei2.2017.8245509 · Cited by 90 · see citing works
Antecedents to Digital Platform Usage in Industry 4.0 by Established Manufacturers
Müller, J. M. (2019) · Sustainability · doi:10.3390/su11041121 · Cited by 74 · see citing works
Security issues in SCADA based industrial control systems
Babu, B., Ijyas, T., Muneer, P., & Varghese, J. (2017) · 2017 2nd International Conference on Anti-Cyber Crimes (ICACC) · doi:10.1109/anti-cybercrime.2017.7905261 · Cited by 73 · see citing works
Calderón Godoy, A. J., & González Pérez, I. (2018) · Journal of Sensor and Actuator Networks · doi:10.3390/jsan7020023 · Cited by 71 · see citing works
Hayes, G., & El-Khatib, K. (2013) · 2013 Third International Conference on Communications and Information Technology (ICCIT) · doi:10.1109/iccitechnology.2013.6579545 · Cited by 65 · see citing works
Bányai, Á., Illés, B., Glistau, E., et al. (2019) · Applied Sciences · doi:10.3390/app9071287 · Cited by 56 · see citing works
An overview of cyber-attack vectors on SCADA systems
Irmak, E., & Erkek, İ. (2018) · International Symposium on Digital Forensic and Security (ISDFS) · doi:10.1109/isdfs.2018.8355379 · Cited by 48 · see citing works
Integration of IEC 61850 SCL and OPC UA to improve interoperability in Smart Grid environment
Cavalieri, S., & Regalbuto, A. (2015) · Computer Standards & Interfaces · doi:10.1016/j.csi.2015.10.005 · Cited by 41 · see citing works
Formal security assessment of Modbus protocol
Nardone, R., Rodríguez, R. J., & Marrone, S. (2016) · International Conference for Internet Technology and Secured Transactions · doi:10.1109/icitst.2016.7856685 · Cited by 41 · see citing works
A Comprehensive Security Analysis of a SCADA Protocol: From OSINT to Mitigation
Rosa, L., de Freitas, M. B., Mazo, S., Monteiro, E., Cruz, T., & Simoes, P. (2019) · IEEE Access · doi:10.1109/access.2019.2906926 · Cited by 41 · see citing works
Kiangala, K. S., & Wang, Z. (2019) · Procedia Manufacturing · doi:10.1016/j.promfg.2019.06.015 · Cited by 38 · see citing works
Authenticated Modbus Protocol for Critical Infrastructure Protection
Phan, R. C. ‐. (2012) · IEEE Transactions on Power Delivery · doi:10.1109/tpwrd.2012.2187122 · Cited by 35 · see citing works
Toward Authenticating the Master in the Modbus Protocol
Liao, G., Chen, Y.-J., Lu, W.-C., & Cheng, T.-C. (2008) · IEEE Transactions on Power Delivery · doi:10.1109/tpwrd.2008.2002942 · Cited by 32 · see citing works
Araújo, P. J. F. A. S., Filho, R. H., Rodrigues, J. J. P. C., Oliveira, J., & Braga, S. A. (2018) · Sensors · doi:10.3390/s18051312 · Cited by 30 · see citing works
Bezerra, A., da Silva, I. M. D., Guedes, L. A., et al. (2019) · Sensors · doi:10.3390/s19122772 · Cited by 30 · see citing works
PLC Code-Level Vulnerabilities
Serhane, A., Raad, M., Raad, R., et al. (2018) · International Conference on Computer and Applications (ICCA) · doi:10.1109/comapp.2018.8460287 · Cited by 29 · see citing works
Automatic Configuration of OPC UA for Industrial Internet of Things Environments
Gutierrez-Guerrero, J. M., & Holgado-Terriza, J. A. (2019) · Electronics · doi:10.3390/electronics8060600 · Cited by 27 · see citing works
ECDSA on Things: IoT Integrity Protection in Practise
Bauer, J., Staudemeyer, R. C., Pöhls, H. C., & Fragkiadakis, A. (2016) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-50011-9_1 · Cited by 25 · see citing works
Attacking SCADA systems: A practical perspective
Rosa, L., Cruz, T., Simões, P., Monteiro, E., & Lev, L. (2017) · IFIP/IEEE International Symposium on Integrated Network Management (IM) · doi:10.23919/inm.2017.7987369 · Cited by 24 · see citing works
Enhancing integrity of modbus TCP through covert channels
Taylor, J. M., & Sharif, H. (2017) · International Conference on Signal Processing and Communication Systems · doi:10.1109/icspcs.2017.8270454 · Cited by 23 · see citing works
Using Data Mining Methods to Detect Simulated Intrusions on a Modbus Network
Li, S.-C., Huang, Y., Tai, B.-C., et al. (2017) · doi:10.1109/sc2.2017.29 · Cited by 19 · see citing works
Korodi, A., & Silea, I. (2017) · 2022 IEEE 20th International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2017.8104949 · Cited by 18 · see citing works
Self-citationCyber security and communications network on SCADA systems in the context of Smart Grids
Rizzetti, T. A., Wessel, P., Rodrigues, A. S., da Silva, B. M., Milbradt, R. G., & Canha, L. N. (2015) · International Universities Power Engineering Conference (UPEC) · doi:10.1109/upec.2015.7339762 · Cited by 15 · see citing works
Research on trusted DNP3-BAE protocol based on hash chain
Lu, Y., & Feng, T. (2018) · EURASIP Journal on Wireless Communications and Networking · doi:10.1186/s13638-018-1129-y · Cited by 12 · see citing works
Proposal of a Secure Modbus RTU Communication with Adi Shamir's Secret Sharing Method
Ádámkó, É., Jakabóczki, G., & Szemes, P. T. (2018) · International Journal of Electronics and Telecommunications · doi:10.24425/119357 · Cited by 11 · see citing works
Korodi, A., Radu, M., & Crisan, R. (2018) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa.2018.8502550 · Cited by 10 · see citing works
Self-citationGenerating data sets as inputs of reference for cyber security issues and industrial control systems
Becmeur, T., Boudvin, X., Brosset, D., Heno, G., Costé, B., Kermarrec, Y., & Laso, P. M. (2017) · International Conference on Research Challenges in Information Science (RCIS) · doi:10.1109/rcis.2017.7956582 · Cited by 6 · see citing works
Trusted hardware sensors for anomaly detection in critical infrastructure systems
Fournaris, A. P., Lampropoulos, K. M., & Koufopavlou, O. (2018) · International Conference on Modern Circuits and Systems Technologies · doi:10.1109/mocast.2018.8376629 · Cited by 6 · see citing works
Shahzad, A., & Kim, Y. (2018) · doi:10.3390/proceedings2010078 · Cited by 5 · see citing works
Security for building automation with hardware-based node authentication
Fischer, T., Lesjak, C., Hoeller, A., et al. (2017) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa.2017.8247567 · Cited by 3 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Sverko, M., Grbac, T. G., & Mikuc, M. (2022) · IEEE Access · doi:10.1109/access.2022.3211288 · Cited by 71 · see citing works
“…various domain of implementation, such as cyber attacks on cloud SCADA systems [183], end-to-end encryption between SCADA and Open PLC [184], fuzzing SCADA protocols in smart grids [185], and cryptographic considerations addressing legacy structures using insecure communication protocols [186].”
Background
- Authors
- Tidrea, A., Korodi, A., & Silea, I.
- Affiliations
- Politehnica University of Timisoara (RO)
- Corresponding author
- Korodi, Adrian
- ORCID
- Korodi, Adrian
- Venue
- Sensors
- Publisher
- MDPI AG
- Published
- 2019-09-27
- Volume
- 19
- Issue
- 19
- Pages
- 4191
- ISSN
- 1424-8220 (ISSN-L)
- PMC
- PMC6806326
- OpenAlex
- W2977169590
- Cited by
- 24
- References
- 41
- Citations by year
- 2026: 1 · 2025: 6 · 2024: 3 · 2023: 4 · 2022: 6 · 2021: 4
- FWCI
- 1.38
- Type
- journal article
- Language
- en
- Open access
- gold
- dx.doi.org
- Licence
- Locations
- Sensors (publishedVersion, cc-by)
- PubMed Central (publishedVersion, cc-by)
- PubMed (publishedVersion)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Keywords
- Trusted Platform Module, SCADA security, industrial automation security, Modbus TCP, data authenticity, message authentication, critical infrastructure protection, Industrial Internet of Things, latency overhead
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
