Modeling and Machine-Checking Bump-in-the-Wire Security for Industrial Control Systems - Critical Infrastructure Protection XIII Access content directly
Conference Papers Year : 2019

Modeling and Machine-Checking Bump-in-the-Wire Security for Industrial Control Systems

Mehdi Sabraoui
  • Function : Author
  • PersonId : 1112204

Abstract

This chapter describes the formal modeling and machine-checking of a bump-in-the-wire device that secures field device communications in industrial control networks. Field devices serve as the connection points between computer-based control systems and the physical processes being controlled. Industrial control network traffic is routinely checked for transmission errors, but limited mechanisms are available for combating attacks that exploit industrial control protocols to target critical infrastructure assets.This chapter focuses on a bump-in-the-wire solution that can be retrofitted on field devices to provide security functionality. The TLA+ formal specification language in combination with the isolation guarantees provided by the seL4 microkernel are used to demonstrate that the bump-in-the-wire solution provides important security and liveness properties. The resulting machine-checked system correctly applies hash-based message authentication to verify the authenticity of incoming messages while being resistant to attacks.
Fichier principal
Vignette du fichier
491841_1_En_14_Chapter.pdf (190.32 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03364565 , version 1 (04-10-2021)

Licence

Attribution

Identifiers

Cite

Mehdi Sabraoui, Jeffrey Hieb, Adrian Lauf, James Graham. Modeling and Machine-Checking Bump-in-the-Wire Security for Industrial Control Systems. 13th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2019, Arlington, VA, United States. pp.271-288, ⟨10.1007/978-3-030-34647-8_14⟩. ⟨hal-03364565⟩
31 View
47 Download

Altmetric

Share

Gmail Facebook X LinkedIn More