Industrial Control System Protocols Research Articles

A novel generative adversarial network-based fuzzing cases generation method for industrial control system protocols

With the interconnection and networking of industrial control systems (ICS), security vulnerabilities in ICS protocols have become a major source of threats to these systems. In order to discover these vulnerabilities and maintain ICS security, generative adversarial network-based fuzz testing (Fuzzing) has been introduced as a popular method to discover vulnerabilities in industrial control system protocols (ICSPs). However, the current approach based on generative adversarial network fuzz testing suffers from problems in terms of compatibility and repetitive generation of test examples, and low acceptance rate. To address these issues, this paper proposes a fuzzing approach based on the synergy of Wasserstein Generative Intelligent Networks (WGAN) and Variation Autoencoder (VAE). In addition, we design an intelligent fuzz framework, WGGFuzz, to efficiently generate a large number of test cases while ensuring the accuracy of the testing results for efficiently generating a large number of test cases in a short period of time. The framework, which does not incorporate ICSPs applicable to a wide range of, shows through experiments that WGGFuzz can be able to achieve 91% in terms of TCRR, 1.41 in terms of ATE, and better performance in terms of DGD.

Private 5G, “Not As Private As You May Think”

As the need grows for mobile solutions that can offer more data throughput with ultra-reliable low-latency communications and better connection density—albeit at risk—private 5G networks and the shift to Industry 4.0 are gaining pace. As 5G technology develops and enterprises start implementing it, they need to be cautious during this transitional phase to make sure they are cognizant of and control risk as their attack surface changes. Many private 5G deployments use 4G/LTE Core networks in Non-Stand-Alone mode, which keeps many of the same vulnerabilities that have been there for years. As a result, private 5G is frequently not fully 5G pure. In this research paper, a few of the present-day weaknesses in the Stream Control Transmission and GPRS Tunnelling protocols—as well as the Industrial Control System protocols—that businesses need to be aware of and safeguard while using these technologies are discussed and shown.

Field classification-based novel fuzzing case generation for ICS protocols

An industrial control system combined with IT is not a special thing; however, cyber security in this field does not mature. Therefore, vulnerability analysis techniques for protocols used in this field are clearly needed. In this paper, we propose a novel test case generation technique for a fuzzing test that can be used for various industrial control system protocols. The proposed fuzzing test is designed for generating a cross-field fuzzing test case because of field dependencies, a characteristic of industrial control system protocols. Additionally, we focus on multilayer testing because the weaknesses of lower layer protocols are inherited by upper layer protocols.

Bolt-On Security Extensions for Industrial Control System Protocols: A Case Study of DNP3 SAv5

Design issues with DNP3 Secure Authentication version 5 are related to implementation complexity, parsing ambiguities, and coupled state. An analysis seeks to help the designers of similar functionality in other SCADA and industrial control system protocols to avoid the same pitfalls.