Elliptic Curve Cryptography Considerations for Securing Automation and SCADA Systems

Area of Science:

• Industrial Control Systems Security
• Applied Cryptography
• Cyber-Physical Systems

Background:

• Industrial Internet of Things (IIoT) and Industry 4.0 environments face escalating cyber threats targeting automation and SCADA systems.
• Legacy SCADA systems, designed without inherent security, are vulnerable due to increased interconnection and data exposure.
• Existing standard protocols require robust security enhancements to protect against modern cyber-attacks.

Purpose of the Study:

• To propose a novel security solution for safeguarding legacy insecure communication protocols in SCADA networks.
• To implement Elliptic Curve Cryptography (ECC) for enhanced data security, considering resource constraints of industrial devices.
• To ensure data authenticity and confidentiality in SCADA and automation systems.

Main Methods:

• Integration of Elliptic Curve Cryptography (ECC) to secure communication protocols.
• Focus on lightweight cryptographic operations suitable for low-memory SCADA devices like PLCs.
• Validation of the security concept on Industruino and MDUINO PLCs for Modbus TCP communication.

Main Results:

• Demonstrated good timing performance for ECC cryptographic operations on industrial PLCs.
• Confirmed the feasibility of applying the proposed security methods to existing SCADA/automation devices.
• Experimental results validate the deployability of the solution in real-world industrial settings.

Conclusions:

• The proposed ECC-based security solution effectively protects legacy SCADA communication protocols.
• The method meets the time constraints of real SCADA networks while ensuring data security.
• This approach enhances the security posture of Industrial Internet of Things and Industry 4.0 systems on existing infrastructure.