Open Access

ARTICLE

PLC Protection System Based on Verification Separation

Xiaojun Pan¹, Haiying Li², Xiaoyi Li¹, Li Xu¹, Yanbin Sun^1,*

1 Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, 510000, China
2 School of Science and Engineering, Laval University, Quebec, G1V0A6, Canada

* Corresponding Author: Yanbin Sun. Email:

Computers, Materials & Continua 2022, 71(2), 2401-2417. https://doi.org/10.32604/cmc.2022.021020

Received 19 June 2021; Accepted 29 September 2021; Issue published 07 December 2021

Abstract

Supervisory control and data acquisition systems (SCADAs) play an important role in supervising and controlling industrial production with the help of programmable logic controllers (PLCs) in industrial control systems (ICSs). A PLC receives the control information or program from a SCADA to control the production equipment and feeds the production data back to the SCADA. Once a SCADA is controlled by an attacker, it may threaten the safety of industrial production. The lack of security protection, such as identity authentication and encryption for industrial control protocols, increases the potential security risks. In this paper, we propose a PLC protection system combined with a monitor between a SCADA and a PLC and a physically separated monitoring station. By using the PLC protection system, identity verification and command verification are separated, and both the identity of the operator and the corresponding commands are recorded. Experiments show that even if the SCADA is controlled by an attacker, our system could still protect the PLC in the field and record the identity of the key command operator, which facilitates the tracing and forensics of malicious activities.

---

Keywords

---