Title :
A Trust System Architecture for SCADA Network Security
Author :
Coates, Gregory M. ; Hopkinson, Kenneth M. ; Graham, Scott R. ; Kurkowski, Stuart H.
Author_Institution :
Dept. of Electr. & Comput. Eng., Air Force Inst. of Technol., Wright-Patterson AFB, OH, USA
Abstract :
This paper discusses the use of a communications network security device, called a trust system, to enhance supervisory control and data-acquisition (SCADA) security. The major goal of the trust system is to increase security with minimal impact on existing utility communication systems. A previous paper focused on the technical operation of the trust system by augmenting routers to protect User Datagram Protocol (UDP)-based traffic. This paper concentrates on placing the trust system into a broader context, creates new trust system implementations to increase its flexibility, and demonstrates the trust system using TCP traffic. Specifically, the article expands on previous work in the following ways: 1) the article summarizes major threats against SCADA systems; 2) it discusses new trust system implementations, which allow the trust system to be used with a wider array of network-enabled equipment; 3) it discusses key SCADA security issues in the literature and shows how the trust system responds to such issues; 4) the paper shows the impact of the trust system when widely prevalent TCP/IP network communication is used; and 5) finally, the paper discusses a new hypothetical scenario to illustrate the protection that a trust system provides against insider threats.
Keywords :
SCADA systems; computer network security; transport protocols; SCADA network security; TCP traffic; TCP/IP network communication; UDP; communication network security; supervisory control and data acquisition security; trust system architecture; user datagram protocol; Computer network security; computer networks; power system security; supervisory control and data-acquisition (SCADA) systems;
Journal_Title :
Power Delivery, IEEE Transactions on
DOI :
10.1109/TPWRD.2009.2034830