Secure Virtual Private LAN Services: An overview with performance evaluation

Virtual Private LAN Services (VPLS) is an Ethernet based VPN (Virtual Private Network) service which provides protocol independent and high speed multipoint-to-multipoint connectivity. In this article, we discuss the possibility to use emerging networks concepts such as Software Defined Networking (SDN) and Network Function Virtualization (NFV) to improve the performance, flexibility and adaptability of VPLS networks. SDN and NFV based VPLS (SoftVPLS) architectures offer new features such as centralized control, network programmability and abstraction to improve the performance, flexibility and automation of traffic, security and network management functions for future VPLS networks.

Virtual private LAN service (VPLS) is a Layer 2 virtual private network technique that has gained enormous popularity in industrial networks. However, the deployment of legacy VPLS architectures in large-scale networks is challenging due to unresolved security and scalability issues. In this paper, we propose a novel hierarchical VPLS architecture based on host identity protocol. The proposed architecture tackles both security and scalability issues in legacy VPLS architectures. It secures the VPLS network by delivering vital security features such as authentication, confidentiality, integrity, availability, and secured control protocol. The security analysis and simulation results confirm that the proposed architecture is protected from various IP-based attacks as well. Theoretical analysis and simulation results have also verified that the proposed architecture provides scalability in control, forwarding, and security planes. Finally, the data plane performance of the proposed architecture is measured in a real-world testbed implementation.

The main objective of emergent standard Virtual Private LAN Service (VPLS) is the interconnection of users located at different geographic locations as if they were in the same local area network. In this sense, the investigations and tests that have been done are mainly focused on point-to-point interconnection scenarios using Virtual Private Networks (VPNs), as there have been few tests done up until now in academic and research networks with multipoint scenarios and they have been done mainly within the same domain, but not between different domains. In this paper, we describe the process to put in production VPLS service for testing purposes in an interprovider environment, doing initial tests on a real scenario. With it, one hopes to verify its behaviour in a real production network, analysing the benefits that can be provided to the customers, especially with respect to advanced applications and distributed computing, as it is the case in Grid applications.

This paper presents an implementation of automation scheme for control of three phase Permanent Magnet Synchronous Motor (PMSM) drive. Performance evaluation and monitoring of drive is described using Supervisory Control and Data Acquisition (SCADA) and Programmable Logic Controller (PLC) system. The control, operation and monitoring of PMSM drive in three basic modes, i.e. position, speed and torque modes is achieved through PLC programming and SCADA. A Human Machine Interface (HMI) control is also developed for operation of drive system at field level controls. Ladder logic programs according to desired control mode of operations are developed to control and monitor the status of PMSM drive. SCADA screens have been developed to control and monitor the status of the motor and for field level control HMI touch screens are designed. The real time data related to PMSM drive such as output of position encoder, torque developed by motor, power input to motor, speed etc. are accessed for supervisory control of drive.

The supervisory control and data acquisition (SCADA) systems monitor and control industrial control systems in many industrial and economic sectors such as water treatment, power plants, railroads, and gas pipelines. The integration of SCADA systems with the internet and corporate enterprise networks for various economical reasons exposes SCADA systems to attacks by hackers who could remotely exploit and gain access to SCADA systems to damage the infrastructure and thereby harming people’s lives. The simplicity of datasets and possible overfitting of models to training data are some of the issues in the previous research. In this paper, we present detecting and classifying malicious command and response packets in a SCADA network by analyzing attribute differences and history of packets using k-means clustering. This study presents a solution to classify SCADA cyber attacks to detect and classify SCADA attacks with high accuracy using a big data framework that comprises of Apache Hadoop and Apache Mahout. Apache Mahout’s random forest classification algorithm is applied on SCADA’s gas pipeline dataset to categorize attacks. When 70% of the data is used for training the classifier, our approach resulted in 5–17% improvement in accuracy for the classification of read response attacks and 2–8% improvement in accuracy for write command attacks with respect to using the original dataset.

SCADA (Supervisory Control and Data Acquisition), these are systems based on real-time processing, control and design for real time infrastructure such as water pumping stations, oil purification plants and rail control centers etc. In the initial structure of SCADA there is no security mechanism that prevents or detects the attacks in SCADA communication network. SCADA technology is not new but was deployed in limited networks; currently these systems have been deployed and accessible by many networks such as LAN/WAN, Mobile networks, Web Browsers and GPRS through internet technology. Using Modern communication facilities SCADA systems are vulnerable from different types of internet attacks that create major security problems for SCADA communication. The current paper proposes cryptography solutions for securing SCADA communication. In first part, we propose Cryptography solution using Advance Encryption Standard (AES) and SHA-1 algorithms to secure each end of SCADA communication by implementing security services such as authentication, integrity, and confidentiality In Second part, we propose hybrid cryptography solution for SCADA and give solution to prevent the major attacks that in- Securing the SCADA communication. Hybrid Cryptography Secure Simulation Model is used to discuss and give solutions for putting security services such as authentication, integrity, confidentiality, and non-repudiation in APDU (Application Protocol Data Unit) and LPDU (Link Protocol Data Unit) within SCADA DNP3 protocol, and Rest of paper provide solutions to overcome/prevent attacks such as Guessing Shared Key, Brute force from Authentication; Eavesdropping, Key Cracking, Man in the Middle from Confidentiality; Frame Injection, Data Replay, Data Deletion from Integrity. We use DNP3Sec as framework. Current paper gives research Directions and methods to more secure real time systems.

In the modern industrial control landscape, Supervisory Control and Data Acquisition (SCADA) systems serve as critical intermediaries in automating and managing complex processes across many industries, including energy, manufacturing, and utilities. While maintaining the availability and efficiency of these systems is essential, their increased integration into networked environments has exposed them to a growing array of cyber threats. As SCADA systems continue to grow and be deployed globally, malicious actors are increasingly target critical infrastructure, making security management progressively more challenging. Our research explores the benefits of conducting forensic investigations focused on SCADA Human-Machine Interface (HMI) systems, emphasizing how centralized equipment analysis can help overcome the unique challenges these systems present. To assist investigators in efficiently collecting system-wide data from SCADA HMI environments, we developed a forensic analysis framework that enables the evaluation of system discrepancies and evidence of potential cyberattacks. Additionally, we present a comprehensive forensic analysis of a SCADA testbed featuring Ignition, a popular SCADA software platform developed by Inductive Automation. Our investigation reveals that SCADA HMI forensics can provide valuable insight into the system's state, allowing for the identification and cross-analysis of critical equipment and operational data across memory, network, and disk. This framework is further supported by the creation of the Ignition Forensic Artifact Carving Tool (IFACT), a SCADA HMI Forensic Analysis Tool designed to assist in extracting artifacts and parsing system information from forensic data sourced from Ignition HMIs. Using IFACT, we achieve accurate insights into device and equipment data in SCADA systems, investigating data persistence in volatile memory and the variability of its lifetime based on the system state.

Abstract: In the oil and gas sector, supervisory control and data acquisition (SCADA) systems have become a revolutionary force that are transforming operations throughout the whole value chain. This in-depth analysis looks at the development, design, and various uses of SCADA systems in the upstream, middle, and downstream domains. It projects that the global SCADA market for oil and gas will grow to $4.52 billion by 2026. Real-time well monitoring, production optimization, and remote operations are made possible by SCADA systems in upstream operations, which greatly increase output and efficiency. The goal of midstream applications is to increase pipeline efficiency and safety by using predictive maintenance, enhanced leak detection, and flow optimization. By streamlining quality assurance, energy management, and process control, SCADA systems can completely transform refinery operations. SCADA deployments are not without difficulties, though, including data management complications, cybersecurity threats, and legacy system interoperability. In addition to addressing these problems, the study looks at new developments that could improve SCADA capabilities, such as edge computing, digital twins, AI and machine learning integration, and 5G technology. According to the research, SCADA is essential for promoting efficiency, safety, and innovation in the oil and gas industry. Businesses that successfully integrate SCADA technologies while overcoming implementation obstacles will be best positioned to prosper in the complicated and fiercely competitive energy market.

The importance of communication security is increased in the power industry, The representative communication network of power industry is the SCADA (Supervisory Control and Data Acquisition) systems. The SCADA system has been used for remote measurement and control in the power industry, Recently, many studies of SCADA network security have been carried out around the world In this paper, we introduce recent security issues in the SCADA network and propose the application of a symmetric encryption method to the Korea SCADA network.

Supervisory Control and Data Acquisition (SCADA) is used in modern power system for monitoring, controlling, gathering the information, transfer to information back to a central station, carry out necessary analysis and control carry out necessary analysis and control. A SCADA system involves the integrated technologies of computer, communication, electric devices etc. Here the communication media provides the physical medium for transferring, controlling and acquisition of data within SCADA from remote locations. Although wireless communications media become an attractive option as communications networks for SCADA system, compared with wired communications, wireless communications in power system environments presents a number of security and reliability issues. As in SCADA system the communication media plays an important role, to meet objectives of the SCADA systems, different wired and wireless communications media have been applied in modern power system environment. This paper presents a concept about SCADA system using Cognitive Radio based IEEE 802.22 standard for overcoming all existing limitations of SCADA's communication media for future power system where details design, analyses of feasibility and benefits over wired and other wireless systems are also described.

Detroit's Remarkable New SCADA SystemThe City of Detroit Water and Sewerage Department (DWSD), the third largest water and sewer utility in the United States, has just completed a new SCADA system of unmatched size in the wastewater and water industry. DWSD's new Supervisory Control and Data Acquisition (SCADA) system replaced the old control systems in the Systems Control Center (SCC), which controls all water distribution and...Author(s)P.J. DadaThomas J. DeLauraSourceProceedings of the Water Environment FederationSubjectSession 39: SCADA, SCADA Applications, and SCADA Integration IDocument typeConference PaperPublisherWater Environment FederationPrint publication date Jan, 2008ISSN1938-6478SICI1938-6478(20080101)2008:14L.2896;1-DOI10.2175/193864708788734728Volume / Issue2008 / 14Content sourceWEFTECFirst / last page(s)2896 - 2899Copyright2008Word count149

Supervisory Control and Data Acquisition (SCADA) systems play a significant role in providing remote access, monitoring and control of critical infrastructures (CIs) which includes electrical power systems, water distribution systems, nuclear power plants, etc. The growing interconnectivity, standardization of communication protocols and remote accessibility of modern SCADA systems have contributed massively to the exposure of SCADA systems and CIs to various forms of security challenges. Any form of intrusive action on the SCADA modules and communication networks can create devastating consequences on nations due to their strategic importance to CIs’ operations. Therefore, the prompt and efficient detection and classification of SCADA systems intrusions hold great importance for national CIs operational stability. Due to their well-recognized and documented efficiencies, several literature works have proposed numerous supervised learning techniques for SCADA intrusion detection and classification (IDC). This paper presents a critical review of recent studies whereby supervised learning techniques were modelled for SCADA intrusion solutions. The paper aims to contribute to the state-of-the-art, recognize critical open issues and offer ideas for future studies. The intention is to provide a research-based resource for researchers working on industrial control systems security. The analysis and comparison of different supervised learning techniques for SCADA IDC systems were critically reviewed, in terms of the methodologies, datasets and testbeds used, feature engineering and optimization mechanisms and classification procedures. Finally, we briefly summarized some suggestions and recommendations for future research works.

This paper proposes an intelligent gateway system for SCADA networks to avoid DOS attacks. The proposed approach provides details about an SIG system architecture which establishes the connection between Master SIGs and Perimeter SIGs, the traffic flow, major alerts, and minor alerts. Simulation experiments are an indispensable phase to analyze and assess the security of SCADA (Supervisory Control and Data Acquisition) systems. Although numerous experiments have taken place, limitations are still not been shrunk. The SCADA Intelligence Gateway concept proposed in this paper is experimentally proved and showed its ability to secure the SCADA system from attacks. The intelligence learning mechanism established the ability to identify malicious traffic through bot production and simulation environments.

Проаналізовано особливості застосування систем SCADA (Supervisory Control And Data Acquisition) та технологій Інтернету речей в умовах переходу промисловості до Індустрії 4.0. Показано, що використання веб SCADA забезпечує більшість вимог до таких систем та є масштабованим рішенням на всіх її рівнях. Розроблено та реалізовано веб-SCADA, компоненти якої працюють на одноплатних комп’ютерах типу Raspberry Pi, визначені вимоги до технічних характеристик компонентів системи.

PPFSCADA: Privacy preserving framework for SCADA data publishing