Advanced Protocol to Prevent Man-in-the-middle Attack in SCADA System
Sangkyo Oh, Hyunji Chung, Sangjin Lee, Kyungho Lee · International Journal of Security and Its Applications · 2014
SCADA system is a computer system that monitors and controls the national infrastructure or industrial process including transportation facilities, water treatment and distribution, electrical power transmission and distribution, and gas pipelines.If a SCADA system is infected by a malicious worm, such as the Stuxnet, disaster is inevitable.Since the appearance of Stuxnet, researchers focused on detecting this intrusion in SCADA networks.As a result, various methods have been presented by researchers.One of them is to monitor traffic and detect anomalous patterns.However, it is not able to detecting a spoofed packet.This study present three cases of system anomaly by example of pattern based on real data of PROFINET/DCP protocol.And propose protection method using the authentication.