Slika omota

A Security-Enhanced Scheme for ModBus TCP Protocol Based on Lightweight Cryptographic Algorithm

Spremljeno u:
Izdano u:Electronics vol. 14, no. 18 (2025), p. 3674-3698
Glavni autor: Le, Xiang
Daljnji autori: Li, Ji, Zhao, Yong, Fan Zhaohong
Izdano:
MDPI AG
Teme:
National Institute of Standards & Technology
Cryptography
Encryption
Data integrity
Semantics
Embedded systems
Distributed network protocols
Security
Protocol
Communication
TCP (protocol)
Confidentiality
Design
Algorithms
Data encryption
Control systems
Retrofitting
Ethernet
Real time
Integrity
Authentication
Energy consumption
Industrial electronics
Online pristup:Citation/Abstract
Full Text + Graphics
Full Text - PDF
Oznake: Dodaj oznaku
Bez oznaka, Budi prvi tko označuje ovaj zapis!
Sažetak:In modern industrial control systems (ICSs), communication protocols such as Modbus TCP remain widely used due to their simplicity, interoperability, and real-time performance. However, these communication protocols (e.g., Modbus TCP) were originally designed without security considerations, lacking essential features such as encryption, integrity protection, and authentication. This exposes ICS deployments to severe security threats, including eavesdropping, command injection, and replay attacks, especially when operating over unsecured networks. To address these critical vulnerabilities while preserving the lightweight nature of the protocol, we propose a Modbus TCP security enhancement scheme that integrates ASCON, an NIST-standardized authenticated encryption algorithm, with the CBOR Object Signing and Encryption (COSE) framework. Our design embeds COSE_Encrypt0 structures into Modbus application data, enabling end-to-end confidentiality, integrity, and replay protection without altering the protocol’s semantics or timing behavior. We implement the proposed scheme in C and evaluate it in a simulated embedded environment representative of typical ICS devices. Experimental results show that the solution incurs minimal computational and memory overhead, while providing robust cryptographic guarantees. This work demonstrates a practical pathway for retrofitting legacy ICS protocols with modern lightweight cryptography, enhancing system resilience without compromising compatibility or performance.
ISSN:2079-9292
Digitalni identifikator objekta:10.3390/electronics14183674
Izvor:Advanced Technologies & Aerospace Database