Simulation-based framework for authenticating SCADA systems and cyber threat security in edge-based autonomous environments

Abstract

Supervisory Control and Data Acquisition (SCADA) systems are pivotal to critical industries, such as oil and gas, water treatment, and power generation, where they enable real-time monitoring and control over complex industrial processes. These systems commonly use protocols like Modbus/RTU, Modbus TCP/IP, DNP3, and IEC60870, each chosen to meet specific operational requirements. However, vulnerabilities in protocols like Modbus TCP/IP, especially in access control, authentication, and data integrity leave SCADA networks susceptible to cyber threats, with risks ranging from process disruption to data breaches or potential physical harm to infrastructure. This study proposes a simulation-based security framework for SCADA environments using the Modbus TCP/IP protocol, incorporating authentication through unique identification bytes, robust encryption to secure communications, and a layered Intrusion Detection and Prevention System (IDS/IPS) to detect and counteract malicious activities. The framework’s effectiveness is demonstrated through simulated scenarios and a real-world case study, showcasing significant resilience against common cyber threats faced by SCADA systems.