Deployment of New Dynamic Cryptography Buffer for SCADA Security Enhancement

New Security Development and Trends to Secure the SCADA Sensors Automated Transmission during Critical Sessions

“…Due to the evolution of technology, the advanced version of DNP3 provides interconnectivity over the Internet; the information travels through non-proprietary protocols, which reside below DNP3 [5,19]. Due to open connectivity, DNP3 has been vulnerable to Internet attacks; most DNP3 devices are configured, and communicate without any proper authentication mechanism or have little protection in the SCADA network against vulnerabilities [23][24][25][26][27][28][29][30]. Cryptography based security mechanisms [31] have been proposed for DNP3 by DNP3 users group, in which symmetric and asymmetric methods are defined and a detailed description of challenge-response technique is made to examine the security goals (or parameters), such as authentication and integrity, and to protect the transmission against attacks, such as replay, spoofing, and modification attacks [8,32,33], at the application layer.…”

“…More specifically, the DNP3 frames are encapsulated in other lower layer protocols, such as SSH, IPSec, and SSL/TLS [23,41], which protect the sensitive information of the SCADA/DNP3 system against Internet vulnerabilities and attacks [20,39,[42][43][44][45][46][47]. In conclusion, DNP3 relies on other open protocols, such as TCP/IP and UDP, in terms of transmission over the Internet and on protocols (such as SSH, IPSec, and SSL/TLS) for security purposes, but these open protocols (such as TCP/IP and UDP) have several vulnerabilities, and the protocols (such as SSH, IPSec, and SSL/TLS) also have limitations [8,36], because they depend on other security protocols, such as cryptography protocols [19,23].…”

“…In the initial structure of DNP3, there is no security mechanism that can protect sensitive information from security threats [5,7,21,23]. Due to the evolution of technology, the advanced version of DNP3 provides interconnectivity over the Internet; the information travels through non-proprietary protocols, which reside below DNP3 [5,19].…”

“…Research [16][17][18][19][20][21][22][23] has been conducted on the vulnerable aspects of SCADA systems. Specifically, cryptography mechanisms have been developed to enhance the security of these critical systems, and most of these developments have been successful.…”

“…SCADA security via cryptography mechanisms has been considered as a vital approach during transmission [19][20][21][22]. On the other hand, cryptography based approaches are deemed to be complex and heavy computational approaches during security design and development-especially, in industrial processing [8,10,19,[22][23][24][25]. The proposed study has analyzed the cryptography approaches, and then, employed the inclusive security solution in DNP3 which significantly increased the security of the SCADA system.…”