Simulating command injection attacks on IEC 60870-5-104 protocol in SCADA system

Abstract

IEC 60870-5-104 is an international standard used for tele-control in electrical engineering and power system applications. It is one of the major principal protocols in SCADA system. Major industrial control vendors use this protocol for monitoring and managing power utility devices. One of the most common attacks which has a catastrophic impact on industrial control systems is the control command injection attack. It happens when an attacker injects false control commands into a control system. This paper presents the IEC 60870-5-104 vulnera-bilities from the perspective of command and information data injection. From the SCADA testbed that we setup, we showed that a success-ful control command injection attack can be implemented by exploiting the vulnerabilities identified earlier.

Securing IEC60870-5-101 Communication Protocol using SCADA Cryptographic and Device Authentication Gateway

“…SCADA system's decision-making entirely depends on the data received from the RTU; based on the received data, the control actions will be taken and sent to the actuator [4]. Therefore, if attackers intended to cause damage to the system, they could exploit vulnerabilities of the communication protocols to intercept and modify the control commands or simply disrupt the data transfer [14]. One of the most significant challenges in securing the SCADA systems is the outdated and insecure communication protocols being implemented many years ago in various sectors [15].…”