journal article·2022-01-05Open access

Securing SCADA Energy Management System under DDos Attacks Using Token Verification Approach

Yu-Sheng Yang, Shih-Hsiung Lee, Wei-Che Chen, Chu-Sing Yang, Yuen-Min Huang, Ting-Wei Hou

Applied Sciences· Volume 12· Issue 1

Abstract

The advanced connection requirements of industrial automation and control systems have sparked a new revolution in the Industrial Internet of Things (IIoT), and the Supervisory Control and Data Acquisition (SCADA) network has evolved into an open and highly interconnected network. In addition, the equipment of industrial electronic devices has experienced complete systemic integration by connecting with the SCADA network, and due to the control and monitoring advantages of SCADA, the interconnectivity and working efficiency among systems have been tremendously improved. However, it is inevitable that the SCADA system cannot be separated from the public network, which indicates that there are concerns over cyber-attacks and cyber-threats, as well as information security breaches, in the SCADA network system. According to this context, this paper proposes a module based on the token authentication service to deter attackers from performing distributed denial-of-service (DDoS) attacks. Moreover, a simulated experiment has been conducted in an energy management system in the actual field, and the experimental results have suggested that the security defense architecture proposed by this paper can effectively improve security and is compatible with real field systems.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Smart Grid Security and Resilience · Physical Unclonable Functions (PUFs) and Hardware Security · Advanced Malware Detection Techniques

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Engineering Science, National Cheng Kung University, Tainan City 701, Taiwan

Department of Intelligent Commerce, National Kaohsiung University of Science and Technology, Kaohsiung City 824, Taiwan

Institute of Computer and Communication Engineering, National Cheng Kung University, Tainan City 701, Taiwan

References (33)

Show source-provided references
1. Boyer, S.A. (2009). Supervisory Control and Data Acquisition, International Society of Automation. [4th ed.].
2. Webb, J.W., and Reis, R.A. (2002). Programmable Logic Controllers Principles and Applications, Phi Learning Private Limited. [5th ed.].
3. The SCADA system applications in management of Yuvacik Dam and Reservoir10.1080/19443994.2014.933615 ↗
4. Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., and Hahn, A. (2014). Guide to Industrial Control Systems (ICS) Security.10.6028/NIST.SP.800-82r2 ↗
5. Miśkowicz, M. (2021). Unfairness of Random Access with Collision Avoidance in Industrial Internet of Things Networks. Sensors, 21.10.3390/s21217135 ↗
6. Parras, J., and Zazo, S. (2019). Repeated Game Analysis of a CSMA/CA Network under a Backoff Attack. Sensors, 19.10.3390/s19245393 ↗
7. Khan, F., Rehman, A., Yahya, A., Jan, M.A., Chuma, J., Tan, Z., and Hussain, K. (2019). A Quality of Service-Aware Secured Communication Scheme for Internet of Things-Based Networks. Sensors, 19.10.20944/preprints201908.0243.v1 ↗
8. Kambourakis, G., Kolias, C., and Stavrou, A. (2017, January 23–25). The Mirai botnet and the IoT Zombie Armies. Proceedings of the MILCOM 2017—2017 IEEE Military Communications Conference (MILCOM), Baltimore, MD, USA.10.1109/MILCOM.2017.8170867 ↗
9. Francino, P.N., and Huff, C. (2016). Energy Management System. (9,335,748), US Patent.
10. Miwa, K. (2016). Building Energy Management System. (7,797,084), US Patent.
11. Implementation of a building energy management system for residential demand response10.1016/j.micpro.2017.10.006 ↗
12. Securing IT/OT Links for Low Power IIoT Devices: Design Considerations for Industry 4.010.1109/ACCESS.2020.3035963 ↗
13. El-hajj, M., Fadlallah, A., Chamoun, M., and Serhrouchni, A. (2019). A Survey of Internet of Things (IoT) Authentication Schemes. Sensors, 19.10.3390/s19051141 ↗
14. xTSeH: A Trusted Platform Module Sharing Scheme Towards Smart IoT-eHealth Devices10.1109/JSAC.2020.3020658 ↗
15. A Lightweight PUF-Based Authentication Protocol Using Secret Pattern Recognition for Constrained IoT Devices10.1109/ACCESS.2021.3084903 ↗
16. Rescorla, E. (2021, April 01). The Transport Layer Security (TLS) Protocol Version 1.3. Available online: https://tools.ietf.org/html/rfc8446.
17. Pricop, E., Fattahi, J., Parashiv, N., Zamfir, F., and Ghayoula, E. (2017, January 5–7). Method for authentication of sensors connected on modbus tcp. Proceedings of the 2017 4th International Conference on Control, Decision and Information Technologies (CoDIT), Barcelona, Spain.10.1109/CoDIT.2017.8102673 ↗
18. Toward Secure and Provable Authentication for Internet of Things: Realizing Industry 4.010.1109/JIOT.2019.2942271 ↗
19. Secure and Lightweight Authentication Scheme for Smart Metering Infrastructure in Smart Grid10.1109/TII.2019.2944880 ↗
20. Choudhary, K., Gaba, G.S., Butun, I., and Kumar, P. (2020). MAKE-IT—A Lightweight Mutual Authentication and Key Exchange Protocol for Industrial Internet of Things. Sensors, 20.10.3390/s20185166 ↗
21. Challenges and Opportunities in Securing the Industrial Internet of Things10.1109/TII.2020.3023507 ↗
22. LIDOR: A Lightweight DoS-Resilient Communication Protocol for Safety-Critical IoT Systems10.1109/JIOT.2020.2985044 ↗
23. Toward a Distributed Approach for Detection and Mitigation of Denial-of-Service Attacks Within Industrial Internet of Things10.1109/JIOT.2020.3028652 ↗
24. DoS-Resilient Distributed Optimal Scheduling in a Fog Supporting IIoT-Based Smart Microgrid10.1109/TIA.2020.2979677 ↗
25. A Survey of Security in SCADA Networks: Current Issues and Future Challenges10.1109/ACCESS.2019.2926441 ↗
26. Selective Authentication Based Geographic Opportunistic Routing in Wireless Sensor Networks for Internet of Things Against DoS Attacks10.1109/ACCESS.2019.2902843 ↗
27. RSS: An Energy-Efficient Approach for Securing IoT Service Protocols Against the DoS Attack10.1109/JIOT.2020.3023102 ↗
28. Dammak, M., Boudia, R.R.M., Messous, M.A., Senouci, S.M., and Gransart, C. (2019, January 11–14). Token- based lightweight authentication to secure iot networks. Proceedings of the 2019 16th IEEE Annual Consumer Communications and Networking Conference (CCNC), Las Vegas, NV, USA.10.1109/CCNC.2019.8651825 ↗
29. (2021, December 04). HULK. Available online: https://github.com/grafov/hulk.
30. (2021, December 04). Slowloris. Available online: https://github.com/gkbrk/slowloris.
31. Shorey, T., Subbaiah, D., Goyal, A., Sakxena, A., and Mishra, A.K. (2018, January 19–22). Performance Comparison and Analysis of Slowloris, GoldenEye and Xerxes DDoS Attack Tools. Proceedings of the 2018 International Conference on Advances in Computing, Communications and Informatics (ICACCI), Bangalore, India.10.1109/ICACCI.2018.8554590 ↗
32. Fadhlillah, A., Karna, N., and Irawan, A. (2021, January 27–28). IDS Performance Analysis using Anomaly-based Detection Method for DOS Attack. Proceedings of the 2020 IEEE International Conference on Internet of Things and Intelligence System (IoTaIS), Bali, Indonesia.10.1109/IoTaIS50849.2021.9359719 ↗
33. Nxumalo, Z.C., Tarwireyi, P., and Adigun, M.O. (2014, January 29–31). Towards privacy with tokenization as a service. Proceedings of the 2014 IEEE 6th International Conference on Adaptive Science and Technology (ICAST), Ota, Nigeria.10.1109/ICASTECH.2014.7068067 ↗