Towards Understanding Man-In-The-Middle Attacks on IEC 60870-5-104 SCADA Networks

Abstract

This paper investigates cyber attacks on ICS which rely on IEC 60870-5-104 for telecontrol communications. The main focus of the paper is on man-in-the-middle attacks, covering modification and injection of commands, it also details capture and replay attacks. An initial set of attacks are preformed on a local software simulated laboratory. Final experiments and validation of a man-in-the-middle attack are performed in a comprehensive testbed environment in conjunction with an electricity distribution operator.

Contributors

Peter Maynard

Kieran McLaughlin

Berthold Haberler

Conference

Publication date: September 2014

Publication date (Print): September 2014

Pages: 30-42

Affiliations

Centre for Secure Information Technologies (CSIT)

Queen’s University Belfast

LINZ STROM GmbH

DOI: 10.14236/ewic/ICSCSR2014.5

Copyright statement: © Peter Maynard et al. Published by BCS Learning and Development Ltd. 2nd International Symposium for ICS & SCADA Cyber Security Research 2014 (ICS-CSR 2014), St Pölten, Austria

License:

This work is licensed under a Creative Commons Attribution 4.0 Unported License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/

Conference name: 2nd International Symposium for ICS & SCADA Cyber Security Research 2014 (ICS-CSR 2014)

Conference acronym: ICSCSR

Conference number: 2

Conference location: St Pölten, Austria

Conference date: 11-12 September 2014

Conference sponsor: Electronic Workshops in Computing (eWiC)

Conference theme: ICS & SCADA Cyber Security Research 2014 (ICS-CSR 2014)

Product

Product Information: 1477-9358 BCS Learning & Development

Self URI (article page): https://www.scienceopen.com/hosted-document?doi=10.14236/ewic/ICSCSR2014.5

Self URI (journal page): https://ewic.bcs.org/

Categories

Series title: Electronic Workshops in Computing