R. Dheeraj, H. Guo, B. Veeravalli and X. Yu, "Design and Development of SCADA Firewall Security Features for Protecting Industrial Operations," 2019 IEEE VTS Asia Pacific Wireless Communications Symposium (APWCS), Singapore, 2019, pp. 1-5. doi: 10.1109/VTS-APWCS.2019.8851675
This paper uses machine learning to identify malicious packets and dynamically update the firewall rules to filter malicious packets from reaching the programmable logic controllers (PLCs). Firstly, research is undertaken to understand SCADA network systems and to understand Modbus protocol. Subsequently, research is conducted on deep packet inspection, feature extraction from the training set of network packets and the appropriate model for the data to be trained. We use Pymodbus to generate malicious packets and to communicate with the server, which simulates the PLC devices we are trying to protect. Furthermore, Scapy library is used to log, read, sniff and analyze the payload of network packets. Subsequently, feature extraction and training of machine learning model with data will be carried out. Finally, the proposed scheme is implemented and tested.
A*STAR Industrial Internet of Things Research Program, under the RIE2020 IAF-PP Grant A1788a0023