Department of Automation and Applied Informatics, Faculty of Automation and Computers, University Politehnica Timisoara, 300223 Timisoara, Romania.
Sensors (Basel). 2019 Sep 27;19(19):4191. doi: 10.3390/s19194191.
The increased number of cyber threats against the Supervisory Control and Data Acquisition (SCADA) and automation systems in the Industrial-Internet-of-Things (IIoT) and Industry 4.0 era has raised concerns in respect to the importance of securing critical infrastructures and manufacturing plants. The evolution towards interconnection and interoperability has expanded the vulnerabilities of these systems, especially in the context of the widely spread legacy standard protocols, by exposing the data to the outside network. After gaining access to the system data by launching a variety of attacks, an intruder can cause severe damage to the industrial process in place. Hence, this paper attempts to respond to the security issue caused by legacy structures using insecure communication protocols (e.g., Modbus TCP, DNP3, S7), presenting a different perspective focused on the capabilities of a trusted platform module (TPM). Furthermore, the intent is to assure the authenticity of the data transmitted between two entities on the same (horizontal interoperation) or different (vertical interoperation) hierarchical levels communicating through Modbus TCP protocol based on functionalities obtained by integrating trusted platform modules. From the experimental results perspective, the paper aims to show the advantages of integrating TPMs in automation/SCADA systems in terms of security. Two methods are proposed in order to assure the authenticity of the messages which are transmitted, respectively the study presents the measurements related to the increased time latency introduced due to the proposed concept.
随着工业物联网 (IIoT) 和工业 4.0 时代对监控和数据采集 (SCADA) 和自动化系统的网络威胁日益增加，人们越来越关注保护关键基础设施和制造工厂的重要性。向互联和互操作性的发展扩大了这些系统的漏洞，特别是在广泛传播的传统标准协议的背景下，因为这些协议将数据暴露在外部网络中。入侵者通过发起各种攻击获取系统数据后，就可以对现有工业流程造成严重破坏。因此，本文试图通过使用不可信的通信协议（如 Modbus TCP、DNP3、S7）来解决遗留结构引起的安全问题，提出了一种不同的观点，重点关注可信平台模块 (TPM) 的功能。此外，目的是确保通过 Modbus TCP 协议进行通信的同一（水平互操作）或不同（垂直互操作）层次结构的两个实体之间传输的数据的真实性，基于通过集成可信平台模块获得的功能。从实验结果的角度来看，本文旨在展示在自动化/SCADA 系统中集成 TPM 的优势，特别是在安全性方面。提出了两种方法来确保传输消息的真实性，分别研究了由于所提出的概念而引入的增加的时间延迟的相关测量。
