The supervisory control and data acquisition (SCADA) is a combined system of elements of hardware and software that is used for controlling industrial processes either remotely or locally. It also useful for monitoring, gathering and processing real time data, and directly interacting with different electronic as well as integrated devices such as valves, pumps, motors, and sensors. Over the years, it has become increasingly interconnected with the internet, making it vulnerable to cyber threats. In order to contain the system's internet attacks, various methods have been used, especially the encryption techniques such as symmetric and asymmetric approaches as well as the decoy SCADA method. However, with the arrival more advanced security threats such as those based on quantum computing, there is a need to introduce security measures that can neutralize such threats. One promising method is quantum cryptography, which is an encryption technique based on quantum mechanics theories. In this study, a quantum-cryptography-based algorithm is proposed. It is based on the QKD and hash-based signature scheme, which act as key generators and authenticators respectively. In order to evaluate the algorithm's performance, it is subjected to a random substitute and intercept resend attack. Using the probabilistic model checker tool, the probability of succumbing to the two attacks is checked. The results show that the algorithm would significantly improve SCADA's resistance against quantum and classical cyber threats.
The supervisory control and data acquisition (SCADA) is a combined system of elements of hardware and software that is used for controlling industrial processes either remotely or locally. It also useful for monitoring, gathering and processing real time data, and directly interacting with different electronic as well as integrated devices such as valves, pumps, motors, and sensors. Over the years, it has become increasingly interconnected with the internet, making it vulnerable to cyber threats. In order to contain the system's internet attacks, various methods have been used, especially the encryption techniques such as symmetric and asymmetric approaches as well as the decoy SCADA method. However, with the arrival more advanced security threats such as those based on quantum computing, there is a need to introduce security measures that can neutralize such threats. One promising method is quantum cryptography, which is an encryption technique based on quantum mechanics theories. In this study, a quantum-cryptography-based algorithm is proposed. It is based on the QKD and hash-based signature scheme, which act as key generators and authenticators respectively. In order to evaluate the algorithm's performance, it is subjected to a random substitute and intercept resend attack. Using the probabilistic model checker tool, the probability of succumbing to the two attacks is checked. The results show that the algorithm would significantly improve SCADA's resistance against quantum and classical cyber threats.
Supervisory Control and Data Acquisition (SCADA) systems are vulnerable to traditional cyber-attacks, such as man-in-the-middle, denial of service, eavesdropping, and masquerade attacks, as well as future attacks based on Grover's and Shor's algorithm implemented in quantum hardware. This paper proposes a quantum-robust scheme based on entanglement and supersingular isogeny-based cryptography. The scheme employs a modified Supersingular Isogeny Key Encapsulation (SIKE) to generate shared secret keys, also authenticating BBM92, a quantum key distribution protocol to generate a symmetric key. The paper uses ASCON-128 and SHA-3 to encrypt and authenticate messages, and provides a comparative analysis of two entanglement-based quantum key distribution protocols. The proposed scheme is compared to the current SCADA standard, AGA-12, and is shown to provide confidentiality, integrity, intrusion resistance, message authentication, and scalability. The randomness of key pairs generated by our algorithm and RSA key pairs is 87.5% and 84.37%, respectively, addressing confidentiality and integrity. Using the BBM92 protocol, our proposed algorithm detects the presence of an adversary by generating an average error rate of 26.07% and information leakage of 76.01%. AGA-12 relies on SHA-1 hash function that Google has cracked recently. However, our algorithm includes SHA-3, a collision and quantum-resistant hash that provides message authentication.
Quantum computing promises significant computational speed-ups that could compromise the security of current public-key cryptography. As quantum technologies advance, SCADA systems will increasingly require enhanced cybersecurity measures. Two main quantum-safe approaches exist: Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD). QKD offers the unique advantage of information-theoretic security, ensuring security regardless of an adversary’s computational power. This thesis addresses two identified research gaps: protecting SCADA networks against potential quantum-computer-based attacks and identifying relevant use cases for QKD to guide further research and adoption. The objective was to assess whether QKD is a viable solution for securing SCADA communications in hydropower plants against quantum threats. The analysis included designing a QKD-based SCADA communication architecture for a hydropower network, conducting a quantum vulnerability assessment, simulating the proposed setup and evaluating the advantages and disadvantages of QKD migration. The results indicate that, at the time of writing, QKD is not a viable option for securing SCADA communications in hydropower plants, as its disadvantages outweigh its benefits. For instance, QKD cannot guarantee availability, which is a critical requirement for SCADA in many critical infrastructures, including hydropower, and it is more costly than alternative quantum-safe solutions.
Supervisory Control and Data Acquisition (SCADA) systems represent the cyber-physical infrastructure core of critical infrastructure, where any security violation can cause severe operational and physical repercussions. The integration of operational technology with Information Technology networks has introduced new vulnerabilities to cyber attacks, while the emergence of quantum computing poses a basic threat to classical cryptographic approaches currently in use within industrial control systems. This paper presents a novel Zero-Trust Post-Quantum Cryptographic (ZT-PQC) solution specifically tailored for resource-constrained SCADA systems. The solution combines lightweight symmetric encryption for field devices, hybrid and pure post-quantum cryptography for higher layers, and continuous Zero-Trust policy enforcement throughout the communication process. A layer-aware cryptographic offloading approach is utilized to strike a balance between quantum resilience and real-time operational requirements. The feasibility of the proposed solution is assessed using a validated synthetic SCADA dataset simulating practical communication patterns, attack models, and system constraints. Experimental results show that the solution provides quantum-resistant security with acceptable latency, minimal communication overhead, and compatibility with existing SCADA systems, thus being amenable to incremental deployment in critical infrastructure systems.
Supervisory Control and Data Acquisition (SCADA) systems are ubiquitous in industrial control processes, such as power grids, water supply systems, traffic control, oil and natural gas mining, space stations and nuclear plants. However, their security faces the threat of being compromised due to the increasing use of open-access networks. Furthermore, one of the research gaps involves the emergence of quantum computing, which has exposed a new type of risk to SCADA systems. Failure to secure SCADA systems can lead to catastrophic consequences. For example, a malicious attack can take control of the power supply to a city, shut down the water supply system, or cause malfunction of a nuclear reactor. The primary purpose of this paper is to identify the new type of attack based on quantum computing and design a novel security scheme to defend against traditional attacks as well as the quantum attack. The methodology of the proposed signcryption is built on the foundation of the classical Bennett and Brassard 1984 (BB84) cryptographic scheme and does not involve computationally expensive third-party validation. The proposed signcryption scheme provides both encryption and intrusion detection. In particular, it detects the man-in-the-middle attack that can lead to other types of attacks. We have simulated the proposed algorithm using the Quantum Information Toolkit in Python. Furthermore, we have validated and analyzed the proposed design through security verification tools, namely, Scyther and PRISM.
Information and Communication Technology (ICT) provides customers with utilities and smart grid solutions, enabling enhanced monitoring and control of energy management systems. This technology is poised to elevate the reliability, sustainability, and efficiency of future electric grids through the implementation of advanced metering infrastructure (AMI). However, current Supervisory Control and Data Acquisition (SCADA) systems lack trusted machine authentication in smart grid communications, leaving the electric grid vulnerable to cyberattacks via sophisticated network technologies such as wireless access points, sensors, routers, and gateways. Therefore, ensuring proper management of data integrity from field sensors is crucial to enhance the reliability of SCADA systems. In this context, the utilization of quantum key distribution (QKD) key pairs is proposed to uphold integrity in smart grid communications. This paper presents a fibre optic blockchain network designed to manage and utilize cryptographic keys, facilitating the authentication of peer-to-peer (P2P) communications in SCADA systems. This demonstration underscores the feasibility of employing QKD and blockchain to further strengthen the integrity and authentication of smart grid communications. Additionally, this paper delves into discussing the performance metrics and overhead expenses of the proposed scheme in comparison with existing state-of-the-art proposals. Simulation results highlight the significant impact of blockchain size on the system setup’s throughput and latency.
The explosive growth of Industrial Internet of Things (IIoT) technologies has been reshaping manufacturing, energy, transportation and infrastructure with real-time monitoring and automation supported by predictive analytics. The more interconnected machines are, the more vulnerable they become to advanced cyberattacks. RSA and ECC are two of the dominant cryptographic algorithms that 60% of the IIoT communications today. They are still susceptible to quantum computing attacks, especially from Shor, which can easily break public-key encryption. This new risk, and the threat it represents, calls for a monitoring of the quantum situation by adding Post Quantum Cryptography (PQC) to guarantee data privacy and resilient systems. This work studies the quantum-empowered security approach to IIoT environment and considers lattice-based, hash-based and code-based cryptography techniques immune to quantum attacks. This paper investigates the industrial system design demands, identifies some of these weaknesses, and presents a secure communication architecture including post-quantum cryptography for device authentication, secure firmware updates and data encryption. Studies show that due to constraints in resources, triage for IIoT devices is difficult, especially because of limitations of processors, among others; latency and scalability are two issues. The approach proposed showcases a means for industrial cybersecurity to benefit from post-quantum cryptography without losing efficiency.