A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

Abstract

Supervisory Control and Data Acquisition (SCADA) systems are the underlying monitoring and control components of critical infrastructures, such as power, telecommunication, transportation, pipelines, chemicals and manufacturing plants. Legacy SCADA systems operated on isolated networks, that made them less exposed to Internet threats. However, the increasing connection of SCADA systems to the Internet, as well as corporate networks, introduces severe security issues. Security considerations for SCADA systems are gaining higher attention, as the number of security incidents against these critical infrastructures is increasing. In this survey, we provide an overview of the general SCADA architecture, along with a detailed description of the SCADA communication protocols. Additionally, we discuss certain high-impact security incidents, objectives, and threats. Furthermore, we carry out an extensive review of the security proposals and tactics that aim to secure SCADA systems. We also discuss the state of SCADA system security. Finally, we present the current research trends and future advancements of SCADA security.

CPS Attacks Mitigation Approaches on Power Electronic Systems With Security Challenges for Smart Grid Applications: A Review

“…In the conventional power system operations paradigm, the electricity is generated in power plants and delivered along with the transmission systems to the customers in the distribution systems. The EMSs placed in control canters can monitor as well as control this unidirectional process via employing SCADA systems [77]. These SCADA systems are typically hosted on dedicated communication infrastructures, including the local area networks, wide-area networks (WANs), and field area networks.…”

“…Content may change prior to final publication. Citation information: DOI 10.1109/ACCESS.2021.3063229, IEEE Access [84], [105], [139], [197] Bad command generation of automatic generation control and manipulate sampling data Transmission threats SCADA [26], [77], [78] Triggering false alarms and injecting false data, and changing the switch states…”

Modern power system reliability assessment with cyber‐intrusion on heat pump systems

“…Path 1 is chosen due to SCADA systems is one of the most vulnerable ICT components in the energy sector. Additionally, there has been a considerable amount of real cyber‐incidents are happening through SCADA systems [20, 21]. There are six distinctive phases that P 1 –P 6 are defined as secure and failed system states, respectively.…”

Securing Against DoS/DDoS Attacks in Internet of Flying Things using Experience-based Deep Learning Algorithm

“…For the data-packet length poison probability function, the suggested system for the detection of ping death attacks is used [2]. The cyber-attacks such DoS, DDoS, domain name system, man in the middle, or also some virus-based attacks are discussed in the research study [3]. Detecting any security-attack comes in the category of cybercrime, which can be find-out or traced by using different techniques like hidden-markov model or also some machine learning strategies, which include naïve bayes, k-nearest neighbor, as well as cyber-bullying detection [4][5][6][7].…”