Elliptic Curve Cryptography Considerations for Securing Automation and SCADA Systems

Securing critical infrastructures and manufacturing plants in the Industrial-Internet-Of-Things and Industry 4.0 is a challenge today due to the increased number of attacks against automation and SCADA systems. These systems were built without any security considerations in mind, so the evolution towards interconnection and interoperability makes them vulnerable in the context of exposing data to the outside network. Even though new protocols are considering built-in security, the widely spread legacy standard protocols need to be protected. Hence, this paper attempts to offer a solution for securing the legacy insecure communication protocols based on elliptic curve cryptography while fulfilling the time constraints of a real SCADA network. Elliptic curve cryptography is chosen to respond to the low memory resources available for the low level devices of a SCADA network (e.g., PLCs), and also because it can achieve the same level of security as other cryptographic algorithms using smaller sizes for the secure keys. Furthermore, the proposed security methods have the purpose of assuring that the data transmitted between entities of a SCADA and automation system are authentic and confidential. The experimental results showed good timing performance for the cryptographic operations executed on Industruino and MDUINO PLCs, demonstrating that our proposed concept is deployable for Modbus TCP communication in a real automation/SCADA network on existing devices from the industry.

Automotive IoT Ethernet-Based Communication Technologies Applied in a V2X Context via a Multi-Protocol Gateway

The architectural approach for complex communication systems must adapt quickly and take into consideration the increasing set of requirements for every industrial field. The automotive domain is evolving toward the electrification era, with massive technological transformations being realized on all architectural, hardware, and software levels. The legacy usage of exclusively microcontrollers is altered by adopting microprocessors with extended functionalities, reshaping the development structure. Although new hardware capabilities are available and Ethernet communication protocols can contribute to a new range of use-cases for intra-car or for vehicle-to-X (V2X) communication, the implications of using multiple protocols that cover different types of requirements, in the same architecture, are not fully determined. The importance of establishing clear expectations for intelligent communication systems considering various technological and architectural factors is significant for future improvements. In the current paper, we examine the compatibility and real-time responsiveness capabilities, in a diverse, service-oriented architecture, for the major automotive IoT Ethernet-based communication technologies. The feasibility analysis is materialized in a multi-protocol gateway solution that facilitates data exchange between entities with different technological origins. Scalable Service-Oriented Middleware over IP (SOME/IP) is considered the relevant protocol in the automotive domain, alongside the Data Distribution Service (DDS), which combines automotive and IoT applicability. The enhanced Communication Abstraction Layer (eCAL) middleware is added to the mix as an alternative solution for future communication scenarios. The obtained results confirm the compatibility between the targeted technologies, offering a clear understanding regarding the limits of a complex multi-protocol communication system. The defined service-oriented architecture offers efficient data exchanges in a gateway context, also allowing the exploration of the real-time capabilities.

Complete Automation of an Energy Consumption Reduction Strategy from a Water Treatment and Distribution Facility, Inside an Industrial Internet of Things-Compliant Proactive Historian Application

The Industrial Internet of Things and Industry 4.0 paradigms are steering the industrial landscape towards better connected entities, superior interoperability and information exchange, which lays the basis for developing more intelligent solutions that are already starting to bring numerous benefits. The current research aligns to this course, in an attempt to build an automated and autonomous software tool, capable of reducing the energy consumption of a water treatment and distribution facility, by optimizing the water sources usage. Based on several previous researches, the present paper details both the complete automation of the optimizing strategy inside a proactive historian application and the tests executed with the finished solution. Possessing the abilities to directly influence the monitored system in a non-invasive manner, and to link all the sequences of the algorithm automatically, the solution is now ready for long-term functioning without any external interference.

Availability Improvements through Data Slicing in PLC Smart Grid Networks

An electrical power grid, is an interconnected network for delivering electricity from producers to consumers. Electrical grids vary in size from covering a single building through national grids (which cover whole countries) to transnational grids (which can cross continents). As the rollout of smart meters continues worldwide, there are use-cases where common solutions fail and the network availability of certain meters is very low due to poor communication conditions. This paper proposes a data slicing model for large data files which have to travel securely and reliably throughout the Smart Grid. The manuscript addresses improvements for PRIME PLC network availability by using correct data slicing at the application level along a tuned transmission rate in accordance with the noise levels of the power grid. Successful communications, even at low rates, mean that no manual interaction from energy supplier operators is needed reducing the maintenance costs for both the energy companies as well as for the end user. Experiments on a low power electrical grid setup have been performed in order to evaluate availability improvements through the proposed method as well as the feasibility of remote firmware upgrades. The results have shown that the current approach has similar upgrade time results with a manual firmware upgrade performed through an optical probe. Moreover, the results show that the presented remote firmware upgrade method is reliable and practical.

Laser and LIDAR in a System for Visibility Distance Estimation in Fog Conditions

Visibility is a critical factor for transportation, even if we refer to air, water, or ground transportation. The biggest trend in the automotive industry is autonomous driving, the number of autonomous vehicles will increase exponentially, prompting changes in the industry and user segment. Unfortunately, these vehicles still have some drawbacks and one, always in attention and topical, will be treated in this paper-visibility distance issue in bad weather conditions, particularly in fog. The way and the speed with which vehicles will determine objects, obstacles, pedestrians, or traffic signs, especially in bad visibility, will determine how the vehicle will behave. In this paper, a new experimental set up is featured, for analyzing the effect of the fog when the laser and LIDAR (Light Detection And Ranging) radiation are used in visibility distance estimation on public roads. While using our experimental set up, in the laboratory, the information offered by these measurement systems (laser and LIDAR) are evaluated and compared with results offered by human observers in the same fog conditions. The goal is to validate and unitarily apply the results regarding visibility distance, based on information arrives from different systems that are able to estimate this parameter (in foggy weather conditions). Finally, will be notifying the drivers in case of unexpected situations. It is a combination of stationary and of moving systems. The stationary system will be installed on highways or express roads in areas prone to fog, while the moving systems are, or can be, directly installed on the vehicles (autonomous but also non-autonomous).

Image-Processing-Based Low-Cost Fault Detection Solution for End-of-Line ECUs in Automotive Manufacturing

The manufacturing industry is continuously researching and developing strategies and solutions to increase product quality and to decrease production time and costs. The approach is always targeting more automated, traceable, and supervised production, minimizing the impact of the human factor. In the automotive industry, the Electronic Control Unit (ECU) manufacturing ends with complex testing, the End-of-Line (EoL) products being afterwards sent to client companies. This paper proposes an image-processing-based low-cost fault detection (IP-LC-FD) solution for the EoL ECUs, aiming for high-quality and fast detection. The IP-LC-FD solution approaches the problem of determining, on the manufacturing line, the correct mounting of the pins in the locations of each connector of the ECU module, respectively, other defects as missing or extra pins, damaged clips, or surface cracks. The IP-LC-FD system is a hardware–software structure, based on Raspberry Pi microcomputers, Pi cameras, respectively, Python and OpenCV environments. This paper presents the two main stages of the research, the experimental model, and the prototype. The rapid integration into the production line represented an important goal, meaning the accomplishment of the specific hard acceptance requirements regarding both performance and functionality. The solution was implemented and tested as an experimental model and prototype in a real industrial environment, proving excellent results.

Cryptographic Considerations for Automation and SCADA Systems Using Trusted Platform Modules

The increased number of cyber threats against the Supervisory Control and Data Acquisition (SCADA) and automation systems in the Industrial-Internet-of-Things (IIoT) and Industry 4.0 era has raised concerns in respect to the importance of securing critical infrastructures and manufacturing plants. The evolution towards interconnection and interoperability has expanded the vulnerabilities of these systems, especially in the context of the widely spread legacy standard protocols, by exposing the data to the outside network. After gaining access to the system data by launching a variety of attacks, an intruder can cause severe damage to the industrial process in place. Hence, this paper attempts to respond to the security issue caused by legacy structures using insecure communication protocols (e.g., Modbus TCP, DNP3, S7), presenting a different perspective focused on the capabilities of a trusted platform module (TPM). Furthermore, the intent is to assure the authenticity of the data transmitted between two entities on the same (horizontal interoperation) or different (vertical interoperation) hierarchical levels communicating through Modbus TCP protocol based on functionalities obtained by integrating trusted platform modules. From the experimental results perspective, the paper aims to show the advantages of integrating TPMs in automation/SCADA systems in terms of security. Two methods are proposed in order to assure the authenticity of the messages which are transmitted, respectively the study presents the measurements related to the increased time latency introduced due to the proposed concept.