A Security-Enhanced Scheme for ModBus TCP Protocol Based on Lightweight Cryptographic Algorithm

Guardat en:

Dades bibliogràfiques
Publicat a:	Electronics vol. 14, no. 18 (2025), p. 3674-3698
Autor principal:	Le, Xiang
Altres autors:	Li, Ji, Zhao, Yong, Fan Zhaohong
Publicat:	MDPI AG
Matèries:	National Institute of Standards & Technology Cryptography Encryption Data integrity Semantics Embedded systems Distributed network protocols Security Protocol Communication TCP (protocol) Confidentiality Design Algorithms Data encryption Control systems Retrofitting Ethernet Real time Integrity Authentication Energy consumption Industrial electronics
Accés en línia:	Citation/Abstract Full Text + Graphics Full Text - PDF
Etiquetes:	Afegir etiqueta Sense etiquetes, Sigues el primer a etiquetar aquest registre!

Descripció
Resum:	In modern industrial control systems (ICSs), communication protocols such as Modbus TCP remain widely used due to their simplicity, interoperability, and real-time performance. However, these communication protocols (e.g., Modbus TCP) were originally designed without security considerations, lacking essential features such as encryption, integrity protection, and authentication. This exposes ICS deployments to severe security threats, including eavesdropping, command injection, and replay attacks, especially when operating over unsecured networks. To address these critical vulnerabilities while preserving the lightweight nature of the protocol, we propose a Modbus TCP security enhancement scheme that integrates ASCON, an NIST-standardized authenticated encryption algorithm, with the CBOR Object Signing and Encryption (COSE) framework. Our design embeds COSE_Encrypt0 structures into Modbus application data, enabling end-to-end confidentiality, integrity, and replay protection without altering the protocol’s semantics or timing behavior. We implement the proposed scheme in C and evaluate it in a simulated embedded environment representative of typical ICS devices. Experimental results show that the solution incurs minimal computational and memory overhead, while providing robust cryptographic guarantees. This work demonstrates a practical pathway for retrofitting legacy ICS protocols with modern lightweight cryptography, enhancing system resilience without compromising compatibility or performance.
ISSN:	2079-9292
DOI:	10.3390/electronics14183674
Font:	Advanced Technologies & Aerospace Database