Shahzad Aamir, Lee Malrey, Xiong Neal Naixue, Jeong Gisung, Lee Young-Keun, Choi Jae-Young, Mahesar Abdul Wheed, Ahmad Iftikhar
Center for Advanced Image and Information Technology, School of Electronics & Information Engineering, Chon Buk National University, 664-14, 1Ga, Deokjin-Dong, Jeonju 561-756, Korea.
School of Information Technology, Jiangxi University of Finance and Economics, Nanchang 330013, China.
Sensors (Basel). 2016 Mar 3;16(3):322. doi: 10.3390/s16030322.
In Industrial systems, Supervisory control and data acquisition (SCADA) system, the pseudo-transport layer of the distributed network protocol (DNP3) performs the functions of the transport layer and network layer of the open systems interconnection (OSI) model. This study used a simulation design of water pumping system, in-which the network nodes are directly and wirelessly connected with sensors, and are monitored by the main controller, as part of the wireless SCADA system. This study also intends to focus on the security issues inherent in the pseudo-transport layer of the DNP3 protocol. During disassembly and reassembling processes, the pseudo-transport layer keeps track of the bytes sequence. However, no mechanism is available that can verify the message or maintain the integrity of the bytes in the bytes received/transmitted from/to the data link layer or in the send/respond from the main controller/sensors. To properly and sequentially keep track of the bytes, a mechanism is required that can perform verification while bytes are received/transmitted from/to the lower layer of the DNP3 protocol or the send/respond to/from field sensors. For security and byte verification purposes, a mechanism needs to be proposed for the pseudo-transport layer, by employing cryptography algorithm. A dynamic choice security buffer (SB) is designed and employed during the security development. To achieve the desired goals of the proposed study, a pseudo-transport layer stack model is designed using the DNP3 protocol open library and the security is deployed and tested, without changing the original design.
在工业系统的监控与数据采集(SCADA)系统中,分布式网络协议(DNP3)的伪传输层执行开放系统互连(OSI)模型中传输层和网络层的功能。本研究采用了一种抽水系统的仿真设计,其中网络节点直接与传感器无线连接,并由主控制器进行监控,作为无线SCADA系统的一部分。本研究还打算关注DNP3协议伪传输层中固有的安全问题。在拆分组装过程中,伪传输层会跟踪字节序列。然而,没有可用的机制能够验证消息或维护从数据链路层接收/传输到数据链路层的字节或主控制器/传感器的发送/响应中的字节完整性。为了正确且顺序地跟踪字节,需要一种机制,该机制能够在从DNP3协议的下层接收/传输字节或向现场传感器发送/响应时执行验证。出于安全和字节验证目的,需要通过采用加密算法为伪传输层提出一种机制。在安全开发过程中设计并采用了动态选择安全缓冲区(SB)。为了实现本研究所提出的目标,使用DNP3协议开放库设计了一个伪传输层堆栈模型,并在不改变原始设计的情况下部署和测试安全性。