Simulating command injection attacks on IEC 60870-5-104 protocol in SCADA system

  • Authors

    • Qais Saif Qassim
    • Norziana Jamil
    • Maslina Daud
    • Norhamadi Ja'affar
    • Salman Yussof
    • Roslan Ismail
    • Wan Azlan Wan Kamarulzaman
    2018-04-06
    https://doi.org/10.14419/ijet.v7i2.14.12816
  • SCADA, IEC 60870-5-104, Cyber-Security, Vulnerability.

  • IEC 60870-5-104 is an international standard used for tele-control in electrical engineering and power system applications. It is one of the major principal protocols in SCADA system. Major industrial control vendors use this protocol for monitoring and managing power utility devices. One of the most common attacks which has a catastrophic impact on industrial control systems is the control command injection attack. It happens when an attacker injects false control commands into a control system. This paper presents the IEC 60870-5-104 vulnera-bilities from the perspective of command and information data injection. From the SCADA testbed that we setup, we showed that a success-ful control command injection attack can be implemented by exploiting the vulnerabilities identified earlier.

     

     

  • References

    1. [1] Mehta BR & Reddy YJ (2015), Chapter 7-SCADA systems. In B. R. Mehta & Y. J. Reddy (Eds.), Industrial Process Automation Systems. Oxford: Butterworth-Heinemann, pp. 237–300.

      [2] Gao W, Morris T, Reaves B & Richey D (2010), On SCADA control system command and response injection and intrusion detection. Proceedings of the IEEE eCrime Researchers Summit, pp. 1–9.

      [3] Nazir S, Patel S & Patel D (2017), Assessing and augmenting SCADA cyber security: A survey of techniques. Computers and Security 70, 436–454.

      [4] Hong J, Stefanov A, Liu CC & Govindarasu M (2012), Cyber-physical security in a substation. Proceedings of the IEEE Power and Energy Society General Meeting, pp. 1–11.

      [5] Dondossola G, Garrone F & Szanto J (2011), Cyber risk assessment of power control systems-A metrics weighed by attack experiments. Proceedings of the IEEE Power and Energy Society General Meeting, pp. 1–9.

      [6] Igure VM, Laughter SA & Williams RD (2006), Security issues in SCADA networks. Computers and Security 25, 498–506.

      [7] Hodo E, Grebeniuk S, Ruotsalainen H & Tavolato P (2017), Anomaly detection for simulated IEC-60870-5-104 traffic. Proceedings of the ACM 12th International Conference on Availability, Reliability and Security, pp. 1–7.

      [8] Tawde R, Nivangune A & Sankhe M (2015), Cyber security in smart grid SCADA automation systems. Proceedings of the IEEE International Conference on Innovations in Information, Embedded and Communication Systems, pp. 1–5.

      [9] Sun CC, Hahn A & Liu CC (2018), Cyber security of a power grid: State-of-the-art. International Journal of Electrical Power and Energy Systems 99, 45–56.

      [10] Pidikiti DS, Kalluri R, Kumar RS & Bindhumadhava BS (2013), SCADA communication protocols: Vulnerabilities, attacks and possible mitigations. CSI Transactions on ICT 1, 135–141.

      [11] Alcaraz C & Zeadally S (2015), Critical infrastructure protection: Requirements and challenges for the 21st century. International Journal of Critical Infrastructure Protection 8, 53–66.

      [12] Chalamasetty GK, Mandal P & Tseng TL (2016), Secure SCADA communication network for detecting and preventing cyber-attacks on power systems. Proceedings of the IEEE Power Systems Conference, pp. 1–7.

  • Downloads

  • How to Cite

    Saif Qassim, Q., Jamil, N., Daud, M., Ja'affar, N., Yussof, S., Ismail, R., & Azlan Wan Kamarulzaman, W. (2018). Simulating command injection attacks on IEC 60870-5-104 protocol in SCADA system. International Journal of Engineering & Technology, 7(2.14), 153-159. https://doi.org/10.14419/ijet.v7i2.14.12816