Scholarlink

Industrial Control Systems (ICS) and SCADA networks underpin critical infrastructure but remain vulnerable due to legacy protocols and growing IT/OT integration. Early designs prioritized real-time performance, leaving protocols such as Modbus, DNP3, IEC 60870-5, PROFINET, and IEC 61850 without authentication, encryption, or integrity protections. This review surveys protocol weaknesses, analyzes security standards, and highlights emerging solutions. IEC 62351 and IEC 62443 introduce TLS encryption, certificate-based authentication, role-based access control, and strong cryptographic mechanisms to enhance protocol security. Complementary defenses, including machine learning and digital twin–based intrusion detection, offer process-aware anomaly detection beyond signature-based methods. Case studies of Stuxnet, Industroyer, and Triton demonstrate how adversaries exploit insecure protocols and supply-chain gaps, while also emphasizing effective mitigation strategies. Looking forward, blockchain, federated learning, zero-trust architectures, and post-quantum cryptography represent promising research directions. This review consolidates past challenges, present solutions, and future trends, offering a comprehensive perspective on securing ICS/SCADA environments.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Securing Industrial Control Systems and SCADA Networks: Protocol Weaknesses, Standards, Emerging Defenses, and Future Research Directions

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Karmrajsinh Jadeja,
  • Mansiba Gohil,
  • Tapan Nahar,
  • Ashish Vijay,
  • Vishal Das

摘要

Industrial Control Systems (ICS) and SCADA networks underpin critical infrastructure but remain vulnerable due to legacy protocols and growing IT/OT integration. Early designs prioritized real-time performance, leaving protocols such as Modbus, DNP3, IEC 60870-5, PROFINET, and IEC 61850 without authentication, encryption, or integrity protections. This review surveys protocol weaknesses, analyzes security standards, and highlights emerging solutions. IEC 62351 and IEC 62443 introduce TLS encryption, certificate-based authentication, role-based access control, and strong cryptographic mechanisms to enhance protocol security. Complementary defenses, including machine learning and digital twin–based intrusion detection, offer process-aware anomaly detection beyond signature-based methods. Case studies of Stuxnet, Industroyer, and Triton demonstrate how adversaries exploit insecure protocols and supply-chain gaps, while also emphasizing effective mitigation strategies. Looking forward, blockchain, federated learning, zero-trust architectures, and post-quantum cryptography represent promising research directions. This review consolidates past challenges, present solutions, and future trends, offering a comprehensive perspective on securing ICS/SCADA environments.