Security Framework for DNP3 and SCADA : New DNPSec Framework to Enable CIA Placed Directly inDNP3, Simulation study, and Enable AuthorizationServices by the Usage of RBAC in SCADA

Munir Majdalawieh

ISBN 10: 383647056X / ISBN 13: 9783836470568

Edité par VDM Verlag Dr. Müller, VDM Verlag Dr. Müller E.K., 2008

A propos de cet article

Neuware - In this work I recommend a new DNPSec framework toenable confidentiality, integrity, and authenticity(CIA) placed directly in the DNP3. Such a frameworkrequires some modifications in the data structure ofthe DNP3 Data Link layer. My main goal is to addressthe threats related to CIA in the DNP3 as part ofSCADA architecture, with a minimum performance impacton the communication link; and without requiringmodification to the much more expensive Master andSubstation devices and the applications supportingthem. Also, and as part of this work, I develop aproof of concept for the DNPSec framework byconducting simulation studies to measure theperformance impact by adding DNPSec functionality onthe communication links and end nodes. One otherrecommendation in my work is to enable authorizationservices by the usage of the Role-Based AccessControl (RBAC) model to define the users securityroles, permissions, authorization, and role hierarchyas one measure to access the SCADA system. Achievingthe desired level of authorization and access controlwill involve integrating the security system withSCADA operations and building RBAC capabilities inthe application level.

N° de réf. du vendeur 9783836470568

Détails bibliographiques

• Titre: Security Framework for DNP3 and SCADA : New DNPSec Framework to Enable CIA Placed Directly inDNP3, Simulation study, and Enable AuthorizationServices by the Usage of RBAC in SCADA
• Éditeur: VDM Verlag Dr. Müller, VDM Verlag Dr. Müller E.K.
• Date de parution: 2008
• Langue: anglais
• ISBN à 10 chiffres: 383647056X
• ISBN à 13 chiffres: 9783836470568
• Reliure: Taschenbuch
• État de l'article: Neu
• Dimensions: 220 L x 150 H x 10 P (en millimètres) 220 millimètres de largeur par 150 millimètres de hauteur par 10 millimètres de profondeur
• Poids: 256 grammes

A propos de ce titre

Synopsis

In this work I recommend a new DNPSec framework to enable con-fidentiality, integrity, and authenticity (CIA) placed directly in the DNP3. Such a framework requires some modifications in the data structure of the DNP3 Data Link layer. My main goal is to address the threats related to CIA in the DNP3 as part of SCADA architecture, with a minimum performance impact on the communication link; and without requiring modification to the much more expensive Master and Substation devices and the applications supporting them. Also, and as part of this work, I develop a proof of concept for the DNPSec framework by conducting simulation studies to measure the performance impact by adding DNPSec functionality on the communication links and end nodes. One other recommendation in my work is to enable authorization services by the usage of the Role-Based Access Control (RBAC) model to define the users' security roles, permissions, authorization, and role hierarchy as one measure to access the SCADA system. Achieving the desired level of authorization and access control will involve integrating the security system with SCADA operations and building RBAC capabilities in the application level.