Towards Understanding Man-In-The-Middle Attacks on IEC 60870-5-104 SCADA Networks

Abstract

This paper investigates cyber attacks on ICS which rely on IEC 60870-5-104 for telecontrol communications. The main focus of the paper is on man-in-the-middle attacks, covering modification and injection of commands, it also details capture and replay attacks. An initial set of attacks are preformed on a local software simulated laboratory. Final experiments and validation of a man-in-the-middle attack are performed in a comprehensive testbed environment in conjunction with an electricity distribution operator.

Affiliations

Centre for Secure Information Technologies (CSIT)

Queen’s University Belfast

LINZ STROM GmbH

Contributors

Peter Maynard

Kieran McLaughlin

Berthold Haberler

Conference

Publication date: September 2014

Publication date (Print): September 2014

Pages: 30-42

ID: 10.14236/ewic/ICSCSR2014.5

Copyright statement: © Peter Maynard et al. Published by BCS Learning and Development Ltd. 2nd International Symposium for ICS & SCADA Cyber Security Research 2014 (ICS-CSR 2014), St Pölten, Austria

License:

This work is licensed under a Creative Commons Attribution 4.0 Unported License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/

Conference name: 2nd International Symposium for ICS & SCADA Cyber Security Research 2014 (ICS-CSR 2014)

Conference acronym: ICSCSR

Conference number: 2

Conference location: St Pölten, Austria

Conference date: 11-12 September 2014

Conference sponsor: Electronic Workshops in Computing (eWiC)

Conference theme: ICS & SCADA Cyber Security Research 2014 (ICS-CSR 2014)

Product

Product Information: 1477-9358 BCS Learning & Development

Self URI (article page): https://www.scienceopen.com/hosted-document?doi=10.14236/ewic/ICSCSR2014.5

Self URI (journal page): https://ewic.bcs.org/

Categories

Series title: Electronic Workshops in Computing