This paper presents a summary and comparison of leading secure Industrial Control System (ICS) communication protocols. We find two categories of ICS protocols: those that run an insecure ICS protocol over TLS and those that use a bespoke security protocol. We assess the key properties of bespoke ICS protocols using formal modelling, for OPC-UA and DNP3-SAv5 we use existing models, and we build formal models for S7Comm-Plus and SSP-21; this lets us make a full comparison between these protocols. For ICS protocols based on TLS, we compare the versions and configurations of TLS specified, and any access control add-ons. This leads to a detailed picture of the security provided and best use cases for each protocol.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Comparison of Security ICS Communication Protocols

  • Daniel Clark,
  • Tom Chothia

摘要

This paper presents a summary and comparison of leading secure Industrial Control System (ICS) communication protocols. We find two categories of ICS protocols: those that run an insecure ICS protocol over TLS and those that use a bespoke security protocol. We assess the key properties of bespoke ICS protocols using formal modelling, for OPC-UA and DNP3-SAv5 we use existing models, and we build formal models for S7Comm-Plus and SSP-21; this lets us make a full comparison between these protocols. For ICS protocols based on TLS, we compare the versions and configurations of TLS specified, and any access control add-ons. This leads to a detailed picture of the security provided and best use cases for each protocol.