Efficient secure group communications for SCADA

Donghyun Choi; Sungjin Lee; Dongho Won; Seungjoo Kim

doi:10.1109/TPWRD.2009.2036181

Efficient secure group communications for SCADA

Donghyun Choi^*, Sungjin Lee, Dongho Won, Seungjoo Kim

^*Corresponding author for this work

Research output: Contribution to journal › Article › peer-review

68 Citations (Scopus)

Abstract

Modern industrial facilities have command and control systems. These industrial command and control systems are commonly called supervisory control and data acquisition (SCADA). In the past, SCADA system has the closed operating environment, so this system were designed without security functionality. These days, as a demand for connecting the SCADA system to the open network increases, the study of SCADA system security is an issue. A key-management scheme is essential for secure SCADA communications. Several key-management schemes for SCADA also have been proposed. Recently, advanced SCADA key-management architecture (ASKMA) was proposed. While previous studies do not support message broadcasting and secure communications, ASKMA supports it. Although the overall performance of ASKMA has many advantages compared to previous studies, it can be less efficient during multicast. In this paper, we propose ASKMA+ which is a more efficient scheme that decreases the computational cost for multicast communication. ASKMA+ reduces the number of keys to be stored in a remote terminal unit and provides multicast and broadcast communications.

Original language	English
Article number	5356212
Pages (from-to)	714-722
Number of pages	9
Journal	IEEE Transactions on Power Delivery
Volume	25
Issue number	2
DOIs	https://doi.org/10.1109/TPWRD.2009.2036181
Publication status	Published - 2010 Apr
Externally published	Yes

Bibliographical note

Funding Information:
Manuscript received September 30, 2008; revised August 03, 2009. First published December 18, 2009; current version published March 24, 2010. This work was supported in part by the Ministry of Knowledge Economy, Korea, under the Information Technology Research Center (ITRC) support program supervised by the Institute of Information Technology Advancement (IITA-2009-(C1090-0902-0016)) and in part by the Defense Acquisition Program Administration and Agency for Defense Development under Contract UD-070054AD. Paper no. TPWRD-00753-2008.

Keywords

Key management
Power system security
Supervisory-control-and-data- acquisition (SCADA) systems

ASJC Scopus subject areas

Energy Engineering and Power Technology
Electrical and Electronic Engineering

Access to Document

10.1109/TPWRD.2009.2036181

Cite this

@article{50d53dd4c9174948b7c20d3f1520bd97,

title = "Efficient secure group communications for SCADA",

abstract = "Modern industrial facilities have command and control systems. These industrial command and control systems are commonly called supervisory control and data acquisition (SCADA). In the past, SCADA system has the closed operating environment, so this system were designed without security functionality. These days, as a demand for connecting the SCADA system to the open network increases, the study of SCADA system security is an issue. A key-management scheme is essential for secure SCADA communications. Several key-management schemes for SCADA also have been proposed. Recently, advanced SCADA key-management architecture (ASKMA) was proposed. While previous studies do not support message broadcasting and secure communications, ASKMA supports it. Although the overall performance of ASKMA has many advantages compared to previous studies, it can be less efficient during multicast. In this paper, we propose ASKMA+ which is a more efficient scheme that decreases the computational cost for multicast communication. ASKMA+ reduces the number of keys to be stored in a remote terminal unit and provides multicast and broadcast communications.",

keywords = "Key management, Power system security, Supervisory-control-and-data- acquisition (SCADA) systems",

author = "Donghyun Choi and Sungjin Lee and Dongho Won and Seungjoo Kim",

note = "Funding Information: Manuscript received September 30, 2008; revised August 03, 2009. First published December 18, 2009; current version published March 24, 2010. This work was supported in part by the Ministry of Knowledge Economy, Korea, under the Information Technology Research Center (ITRC) support program supervised by the Institute of Information Technology Advancement (IITA-2009-(C1090-0902-0016)) and in part by the Defense Acquisition Program Administration and Agency for Defense Development under Contract UD-070054AD. Paper no. TPWRD-00753-2008.",

year = "2010",

month = apr,

doi = "10.1109/TPWRD.2009.2036181",

language = "English",

volume = "25",

pages = "714--722",

journal = "IEEE Transactions on Power Delivery",

issn = "0885-8977",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "2",

}

TY - JOUR

T1 - Efficient secure group communications for SCADA

AU - Choi, Donghyun

AU - Lee, Sungjin

AU - Won, Dongho

AU - Kim, Seungjoo

N1 - Funding Information: Manuscript received September 30, 2008; revised August 03, 2009. First published December 18, 2009; current version published March 24, 2010. This work was supported in part by the Ministry of Knowledge Economy, Korea, under the Information Technology Research Center (ITRC) support program supervised by the Institute of Information Technology Advancement (IITA-2009-(C1090-0902-0016)) and in part by the Defense Acquisition Program Administration and Agency for Defense Development under Contract UD-070054AD. Paper no. TPWRD-00753-2008.

PY - 2010/4

Y1 - 2010/4

N2 - Modern industrial facilities have command and control systems. These industrial command and control systems are commonly called supervisory control and data acquisition (SCADA). In the past, SCADA system has the closed operating environment, so this system were designed without security functionality. These days, as a demand for connecting the SCADA system to the open network increases, the study of SCADA system security is an issue. A key-management scheme is essential for secure SCADA communications. Several key-management schemes for SCADA also have been proposed. Recently, advanced SCADA key-management architecture (ASKMA) was proposed. While previous studies do not support message broadcasting and secure communications, ASKMA supports it. Although the overall performance of ASKMA has many advantages compared to previous studies, it can be less efficient during multicast. In this paper, we propose ASKMA+ which is a more efficient scheme that decreases the computational cost for multicast communication. ASKMA+ reduces the number of keys to be stored in a remote terminal unit and provides multicast and broadcast communications.

AB - Modern industrial facilities have command and control systems. These industrial command and control systems are commonly called supervisory control and data acquisition (SCADA). In the past, SCADA system has the closed operating environment, so this system were designed without security functionality. These days, as a demand for connecting the SCADA system to the open network increases, the study of SCADA system security is an issue. A key-management scheme is essential for secure SCADA communications. Several key-management schemes for SCADA also have been proposed. Recently, advanced SCADA key-management architecture (ASKMA) was proposed. While previous studies do not support message broadcasting and secure communications, ASKMA supports it. Although the overall performance of ASKMA has many advantages compared to previous studies, it can be less efficient during multicast. In this paper, we propose ASKMA+ which is a more efficient scheme that decreases the computational cost for multicast communication. ASKMA+ reduces the number of keys to be stored in a remote terminal unit and provides multicast and broadcast communications.

KW - Key management

KW - Power system security

KW - Supervisory-control-and-data- acquisition (SCADA) systems

UR - https://www.scopus.com/pages/publications/77950187346

U2 - 10.1109/TPWRD.2009.2036181

DO - 10.1109/TPWRD.2009.2036181

M3 - Article

AN - SCOPUS:77950187346

SN - 0885-8977

VL - 25

SP - 714

EP - 722

JO - IEEE Transactions on Power Delivery

JF - IEEE Transactions on Power Delivery

IS - 2

M1 - 5356212

ER -

Efficient secure group communications for SCADA

Abstract

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this