Secure security model implementation for security services and related attacks base on end-to-end, application layer and data link layer security

New Security Development and Trends to Secure the SCADA Sensors Automated Transmission during Critical Sessions

“…These protocols provide interconnectivity with DNP3 over the Internet. Therefore, this protocol is also defined as an open or non-proprietary protocol in SCADA systems [1][2][3][6][7][8][9][10][11].…”

“…Due to open connectivity, DNP3 has been vulnerable to Internet attacks; most DNP3 devices are configured, and communicate without any proper authentication mechanism or have little protection in the SCADA network against vulnerabilities [23][24][25][26][27][28][29][30]. Cryptography based security mechanisms [31] have been proposed for DNP3 by DNP3 users group, in which symmetric and asymmetric methods are defined and a detailed description of challenge-response technique is made to examine the security goals (or parameters), such as authentication and integrity, and to protect the transmission against attacks, such as replay, spoofing, and modification attacks [8,32,33], at the application layer. However, many limitations are accounted for in DNP3 security design and development, and most of the work is in initial phases or still in the development phases.…”

“…In the SCADA system, DNP3 performs several operations followed by functions (codes), such as transfer functions, control functions, freeze functions and time synchronization functions, and file transferring functions [5]. Now-a-days, DNP3 is employed to interconnect field devices or remote sensors, located in various geographical locations and controlled from central controller(s) [6][7][8]. With the acquisition of modern technologies and connectivity over the Internet, SCADA/DNP3 communication has been vulnerable to cyber security threats which can be tremendously harmful to industrial systems [7][8][9].…”

“…Several security mechanisms, including security pattern approaches, TLS/SSL, Internet Protocol Security (IPSec), Secure Shell (SSH), hardware/software firewalls, demilitarized zones (DMZs), authentication protocols, and cryptography solutions, have been designed and deployed to protect industrial communication against vulnerabilities and potential attacks [6,7,[13][14][15]. Among these security approaches, cryptography based mechanisms are suggested as the best security approaches, due to their independence and implementation evaluation [8,[16][17][18][19]. SCADA security via cryptography mechanisms has been considered as a vital approach during transmission [19][20][21][22].…”

“…SCADA security via cryptography mechanisms has been considered as a vital approach during transmission [19][20][21][22]. On the other hand, cryptography based approaches are deemed to be complex and heavy computational approaches during security design and development-especially, in industrial processing [8,10,19,[22][23][24][25]. The proposed study has analyzed the cryptography approaches, and then, employed the inclusive security solution in DNP3 which significantly increased the security of the SCADA system.…”