Security Architecture for Supervisory Control and Data Acquisition (SCADA) Networks**

监控和数据采集 (SCADA) 网络的安全架构**

• 批准号: 533183-2018
• 负责人: Sampalli, Srinivas
• 金额: $ 2.86万
• 依托单位: Dalhousie University
• 依托单位国家: 加拿大
• 项目类别: Collaborative Research and Development Grants
• 财政年份: 2018
• 资助国家: 加拿大
• 起止时间: 2018-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=664195
• 关键词: Security; Architecture; Supervisory; Control; Data

Supervisory Control and Data Acquisition (SCADA) networks are an integral part of critical industrial infrastructures, such as power grids, water supply units, nuclear plants, oil and natural gas pipelines, and other distributed systems. Traditional SCADA networks were isolated and their applications were individually managed. However, recent designs are beginning to increasingly use open access communication protocols and the applications that they manage are mainly smart devices and sensors that connect via the Internet. While this has led to improved performance and better manageability, it has also exposed such systems to cyber-threats and made them vulnerable to cyber-attacks. ** Research on securing SCADA networks has attracted enormous attention due to its inherent challenges, namely, lack of standards, weak cryptographic protocols due to resource constraints, and the distributed open access nature of such systems. The primary objective of this proposal is to investigate, design and develop a security architecture for SCADA networks and test it on two critical infrastructure applications, namely, smart grid and smart water supply management. The novelty of the proposal is the design and development of an end-to-end architecture that uses a context-aware framework with lightweight algorithms for mitigating cyber attacks on SCADA networks. The supporting organizations for this proposal are Cistel Technology Inc., an Ottawa based IT company that is developing a smart power system and Technologie Sanstream, a Quebec based company that is developing a smart water management system. Thus this research will address a crucial area in the design and deployment of secure SCADA networks for both companies. Over a period of three years, this project will train two Ph.D. students and nine Masters students. These students will gain rich knowledge and diverse skill sets in the areas of cyber-security and smart critical infrastructures, consequently benefiting Canadian organizations and industries that are in urgent need of highly qualified personnel in this area. ****

监督控制和数据获取（SCADA）网络是关键工业基础设施的组成部分，例如电网，供水单位，核电站，石油和天然气管道以及其他分布式系统。传统的SCADA网络被隔离，其应用程序单独管理。但是，最近的设计开始越来越多地使用开放访问通信协议，其管理的应用程序主要是通过Internet连接的智能设备和传感器。尽管这导致了性能的提高和更好的可管理性，但它还将此类系统暴露于网络威胁性，并使它们容易受到网络攻击的影响。 **有关确保SCADA网络的研究引起了人们的固有挑战，即缺乏标准，由于资源限制而引起的弱加密协议以及此类系统的分布式开放访问性质。该提案的主要目的是调查，设计和开发用于SCADA网络的安全体系结构，并在两个关键的基础设施应用程序（即智能电网和智能水源管理）上进行测试。该提案的新颖性是端到端体系结构的设计和开发，该建筑使用具有背景感知的框架，该框架具有轻量级算法，以减轻对SCADA网络的网络攻击。该提案的支持组织是基斯特技术公司Cistel Technology Inc.，这是一家位于渥太华的IT公司，该公司正在开发智能电力系统和Technologie Sanstream，这是一家正在开发智能水管理系统的公司。因此，这项研究将解决两家公司安全SCADA网络的设计和部署的关键领域。在三年的时间内，该项目将培训两位博士学位。学生和九个硕士学生。这些学生将在网络安全和智能关键基础设施领域获得丰富的知识和各种技能，因此使加拿大组织和行业受益，这些组织和行业迫切需要该领域的高素质人员。 ****