The Scada Review: System Components, Architecture, Protocols and Future Security Trends
Total Page:16
File Type:pdf, Size:1020Kb
American Journal of Applied Sciences 11 (8): 1418-1425, 2014 ISSN: 1546-9239 © 2014 A. Shahzad et al ., This open access article is distributed under a Creative Commons Attribution (CC-BY) 3.0 license doi:10.3844/ajassp.2014.1418.1425 Published Online 11 (8) 2014 (http://www.thescipub.com/ajas.toc) THE SCADA REVIEW: SYSTEM COMPONENTS, ARCHITECTURE, PROTOCOLS AND FUTURE SECURITY TRENDS 1 1 1 2 Shahzad, A., S. Musa, A. Aborujilah and M. Irfan 1Malaysian Institute of Information Technology (MIIT), University Kuala Lumpur, Malaysia 2Windfield College, Kuala Lumpur, Malaysia Received 2014-01-15; Revised 2014-05-13; Accepted 2014-05-27 ABSTRACT The Supervisory Control and Data Acquisition (SCADA) system has prominent place and play important roles within real time industrial communication included “electric stations, oil stations and water purification plants”. In this study; the SCADA System main components, architecture and important protocols, which have been used in SCADA message transmission are reviewed. After review, the current research changes the direction (Section: Future Work) to the security of SCADA system and the existing methods or security methods that have been deployed within the SCADA system. This review also gives directions to secure SCADA network communication. Keywords: Supervisory Control and Data Acquisition (SCADA) System, Protocols, Security Trends 1. INTRODUCTION to Master Terminal Station (MTU) for monitoring and controlling the entire SCADA system. Usually, SCADA 1.1. SCADA System Components system is divided into five main components/parts (illustrated in Fig. 1) “included Master Terminal Unit The SCADA system is based on hardware included (MTU), Remote Terminal Unit (RTU) and Human “Master Terminal Unit (MTU), Remote Terminal Units Machine Interface (HMI) historian” and SCADA (RTUs)” or/and actuators and sensors and software communication media or link (Stouffer and Kent, 2006; included Human Machine Interface (HMI) or other user Musa et al ., 2013b). More detail related with SCADA software that provides communication interface between components is following below. SCADA hardware and software. Human Machine Interface (HMI) also provides facility to visualized entire 1.2. Master Terminal Unit (MTU) SCADA communication included controlling and The center controller or master terminal unit is may monitoring. Master Terminal Unit (MTU) is located at form of a server (computer) or/and group of sub servers control center or perform the services of control station and connected with one or more Remote Terminal Units connected directly or indirectly with main server, (RTUs), that may geographically distributed over remote through communication link such as “Local Area sites (wide area network) or within Local Area Network Network (LAN) or/and Wide Area Network (WAN)”. (LAN) using communication link/media such as radio Human Machine Interface (HMI) is typically installed in signals, telephone line, cable connection, satellite and Master Terminal Unit (MTU) or control center and micro waves media. Typically, physical environment is provide facility to visualized the information coming connected with actuators or/and sensors and from remote terminal units. The information is displayed actuators/sensors are connected with Remote Terminal in understand able form such as in the form of textual Units (RTUs). The RTUs have been collecting and graphical, that will easily understood able for data/information from actuators/sensors and then process SCADA user/operators during communication. Corresponding Author: Shahzad, A., Malaysian Institute of Information Technology (MIIT), University Kuala Lumpur, Malaysia Science Publications AJAS 1418 Shahzad, A. et al . / American Journal of Applied Sciences 11 (8): 1418-1425, 2014 Fig. 1. SCADA communication component So, each user terminals or sub terminals will visualize as home or office computer (Stouffer and Kent, 2006; associated information on display screen by connected Musa et al ., 2013b). Main services performed by with main server through communication media. Master Terminal Unit (MTU) are follows below: Few years before, SCADA system has many • Monitor and control entire SCADA communication incompatibilities in the terms of software/hardware through communication link such as LAN/WAN connectivity and information/data visualization, but (radio signals, telephone line, cable connection, with great revolution in DCS (distributed control satellite and micro waves media) system), now SCADA provides high resolution display • (screen). Therefore, SCADA operators can easy view Using human machine software; visualized the the site map or remote station operational view in high data/information related with SCADA resolution and also successfully resolved the communication in the forms of text and graph compatibilities issues during hardware/software • Send request data/message to RTUs included current configuration and installation. So, any SCADA status of RTUs, information collection from RTUs, software/hardware will easily install and operate, while check communication link and upon receiving connecting with simple server (computer) included information/data from RTUs, perform acquisition home computer or office computer having Microsoft 1.3. Remote Terminal Unit (RTU) windows (XP, window 7 or 8). With the SCADA advance software compatibilities Substations or Remote Terminal Units (RTUs) are act and connectivity, open new ways to install SCADA as slave stations in SCADA architecture. Typically, system applications included SCADA modeling and Remote Terminal Units (RTUs) are connected with simulation application, hydraulic modeling, physical environment through actuators or sensors. RTUs geographical information system, drawing have been collecting real time information from sensors applications and data bases within a single computer and transmit back to master terminal station, usually Science Publications 1419 AJAS Shahzad, A. et al . / American Journal of Applied Sciences 11 (8): 1418-1425, 2014 depend upon the request send from master station. In few system design that compatible with hardware, while cases, remote terminal station is also able to send request installation of new system (Stouffer and Kent, 2006; to master station such as in case of disaster, disaster Musa et al ., 2013b). Main services performed by recovery, actuators or sensors functions off and other Human Machine Interface (HMI) are follows below: critical issues. Main services performed by Remote Terminal Unit (RTU) are follows below. • Provide interface for SCADA communication Remote terminal stations are responsible to collect between hardware and software information/data from sensors or actuators that are • Display all SCADA operational information such as connected with physical environment and process controlling and monitoring and communication information back to master station (depending on status between Master Terminal Unit (MTU) and master request). Remote Terminal Units (RTUs) or/and Remote Remote Terminal Units (RTUs) are geographically Terminal Units (RTUs) and Master Terminal Unit distributed over different sites, collecting and processing (MTU) in the form textual or graph or/and other the real time information to master station using link human readable text LAN/WAN (radio signals, telephone line, cable • Also provides conversion between several data types connection, satellite and micro waves media,). Remote such as analog to digital, digital to analog, Terminal Units (RTUs) are also responsible to deliver the digital/analog to human readable text and text to current status information of physically devices connected digital/analog with network included devices are configured properly and working (operation) in right directions (Stouffer and Kent, Some of typical software's uses by SCADA system 2006; Musa et al ., 2013b). (Stouffer and Kent, 2006) are following below: • 1.4. Human Machine Interface (HMI) “Master station (computer) operating node” is based on UNIX platform and uses for controlling master Human Machine Interface (HMI) or SCADA user station hardware interface is most important part of SCADA system. • “Terminal station operating node” is uses for This provides interface between hardware and controlling terminal station hardware and usually, software within SCADA communication. SCADA master station operating node functionality is same system deployment and performance are depending on as terminal station operating node software (Human Machine Interface) specifications • “Master station software (Application)”; provides user such as testing, checked and compatible with numbers interface or graphical user interface and operate/control of nodes within SCADA network. Usually, Human “communication between master terminal unit (MTU) Machine Interface (HMI) has been designed according and Remote Terminal Units (RTUs) or/and Remote to SCADA network structure needs and specification. Terminal Units (RTUs) and Master Terminal Unit Some proprietary software’s are available (in market (MTU)”. At other side, “Terminal station software (Application)”, is basically part of master station or online) and uses for specific SCADA hardware software and used to access information/data, that is configuration. Often does not provide interface or available on master station software (Application) compatibilities for other vendors”hardware”. • “Protocol drivers” are usually situated in both master Commercial “Off-The-Shelf (COTS) products are station and terminal station communication