Security Improvements by Separating the Cryptographic Protocol from the Network Stack onto a Multi-MCU Architecture
- The number of IoT devices in SCADA and ICS systems is rising quickly, especially in the domain of critical infrastructures. But these kinds of systems are performing mission critical tasks like controlling devices in industrial facilities or substations in the smart grid. Therefore, they are subject to a lot of regulatory standards. Yet, to provide remote access over the internet, special architectures are developed to integrate a network interface into these devices without inferring with the actual functionality. However, these architectures either lack security measures against cyber-attacks or do not offer the necessary performance for time-critical communication interfaces. To solve that, an architecture consisting of three units is introduced in this paper to provide a network interface with extensive security measures and a high performance. The main feature is the isolation of the cryptographic functionality onto an additional MCU. After proposing the basic concept, the paper presents many implementation details. Based on the current state of implementation, a concept validation of the realized architecture is described.
Author: | Tobias Frauenschläger, Sebastian Renner, Jürgen MottokORCiDGND |
---|---|
DOI: | https://doi.org/10.1007/978-3-030-52794-5_14 |
Parent Title (English): | Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings |
Publisher: | Springer International Publishing |
Document Type: | conference proceeding (article) |
Language: | English |
Year of first Publication: | 2020 |
Release Date: | 2021/02/17 |
Tag: | Critical infrastructures; Cyber-security; Dos prevention; Functional safety; Industrial Control System; Industrial Internet of Things; Multi microcontroller setup Dos prevention Critical infrastructures; Network security; Supervisory Control and Data Acquisition System Multi microcontroller setup Dos prevention Critical infrastructures |
First Page: | 185 |
Last Page: | 199 |
Institutes: | Fakultät Elektro- und Informationstechnik |
Fakultät Elektro- und Informationstechnik / Laboratory for Safe and Secure Systems (LAS3) | |
Begutachtungsstatus: | begutachtet |
research focus: | Information und Kommunikation |