Design and Development of SCADA Firewall Security Features for Protecting Industrial Operations

Design and Development of SCADA Firewall Security Features for Protecting Industrial Operations

2019 IEEE VTS Asia Pacific Wireless Communications Symposium (APWCS)

10.1109/VTS-APWCS.2019.8851675

https://doi.org/10.1109/VTS-APWCS.2019.8851675

R Dheeraj, Huaqun Guo, Bharadwaj Veeravalli, Xingjie Yu

Firewall rule update, malicious packets, Machine Learning, SCADA, comprehensive packet inspection

28 August 2019

R. Dheeraj, H. Guo, B. Veeravalli and X. Yu, "Design and Development of SCADA Firewall Security Features for Protecting Industrial Operations," 2019 IEEE VTS Asia Pacific Wireless Communications Symposium (APWCS), Singapore, 2019, pp. 1-5. doi: 10.1109/VTS-APWCS.2019.8851675

This paper uses machine learning to identify malicious packets and dynamically update the firewall rules to filter malicious packets from reaching the programmable logic controllers (PLCs). Firstly, research is undertaken to understand SCADA network systems and to understand Modbus protocol. Subsequently, research is conducted on deep packet inspection, feature extraction from the training set of network packets and the appropriate model for the data to be trained. We use Pymodbus to generate malicious packets and to communicate with the server, which simulates the PLC devices we are trying to protect. Furthermore, Scapy library is used to log, read, sniff and analyze the payload of network packets. Subsequently, feature extraction and training of machine learning model with data will be carried out. Finally, the proposed scheme is implemented and tested.

PublisherCopyrights

A*STAR Industrial Internet of Things Research Program, under the RIE2020 IAF-PP Grant A1788a0023

© 2019 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.

https://oar.a-star.edu.sg/communities-collections/articles/14725

978-1-7281-1204-6
978-1-7281-1203-9
978-1-7281-1205-3

Institute for Infocomm Research