전력 SCADA 시스템의 RS-232C 시리얼 통신구간에서의 Man-in-the-Middle Attack 가능성 연구

초록

In this paper we tested the possibility of man-in-the-middle attacks by eavesdropping serial communication lines between devices in SCADA (Supervisory Control and Data Acquisition) systems for power systems. SCADA systems have been used in the national critical infrastructures, therefore the problems with SCADA systems may lead to monetary damage and uncomfortable living as well as unstable national security. Consequently, it is important to take steps to prevent from malicious attacks using security vulnerabilities. Most SCADA systems use serials to communicate between devices. In this paper, we showed the possibility of attack with tapping and evaluated the efficiency of some solutions. We set up a test environments for RS-232C communications and implemented attacking modules to eavesdrop and modify packets. Finally we compared the performance of encryption, message authentication and HAMC which are possible solution to apply.

키워드