Formal Security Evaluation and Improvement of Industrial Ethernet EtherCAT Protocol

doi:10.7544/issn1000-1239.2020.20200399

	Formal Security Evaluation and Improvement of Industrial Ethernet EtherCAT Protocol
	Feng, Tao; Wang, Shuaishuai; Gong, Xiang; Fang, Junli
刊名	Jisuanji Yanjiu yu Fazhan/Computer Research and Development
	2020-11-01
卷号	57 期号:11 页码:2312-2327
关键词	Ethernet Function evaluation Hash functions Industrial research Man machine systems Model checking Petri netsIndustrial control systems Industrial Ethernets Key distribution centers Man in the middle attacks Real time performance Security evaluation Security functions Security verification
ISSN号	10001239
DOI	10.7544/issn1000-1239.2020.20200399
英文摘要	The EtherCAT protocol is widely used due to its high real-time performance and strong performance. However, with the rapid development and openness of the Industrial Ethernet protocol, industrial control systems are subject to huge network attack risks. There are many studies on the security and improvement of industrial Ethernet protocols, but these studies lack formal modeling and security evaluation of the protocol, and only focus on the realization of the security function of the protocol itself, which has certain limitations. In order to solve the current situation of industrial Ethernet being attacked, we take EtherCAT protocol which is widely used at present as the research object, and propose a model checking method based on colored Petri net theory and Dolev-Yao attack method, and evaluate and improve the security of the protocol. First, we verify the security mechanism of the protocol FSoE based on Petri net theory and CPN Tools model tools; then introduce the Dolev-Yao attack model to evaluate the security of the original model of the protocol. It is found that there are 3 types of man-in-the-middle attack vulnerabilities in the protocol, including tampering, replay, and deception. Finally, a new solution is proposed for the vulnerabilities in the protocol. A key distribution center and a Hash function are added to the original protocol. The security verification of the new scheme is carried out again using the CPN model detection tool. Through verification, it can be found that the new scheme can effectively prevent 3 types of man-in-the-middle attacks and improve the security of the protocol. © 2020, Science Press. All right reserved.
语种	中文
出版者	Science Press
内容类型	期刊论文
源URL	[http://ir.lut.edu.cn/handle/2XXMBERH/132378]
专题	计算机与通信学院
作者单位	Department of Computer and Communication, Lanzhou University of Technology, Lanzhou; 730000, China
推荐引用方式 GB/T 7714	Feng, Tao,Wang, Shuaishuai,Gong, Xiang,et al. Formal Security Evaluation and Improvement of Industrial Ethernet EtherCAT Protocol[J]. Jisuanji Yanjiu yu Fazhan/Computer Research and Development,2020,57(11):2312-2327.
APA	Feng, Tao,Wang, Shuaishuai,Gong, Xiang,&Fang, Junli.(2020).Formal Security Evaluation and Improvement of Industrial Ethernet EtherCAT Protocol.Jisuanji Yanjiu yu Fazhan/Computer Research and Development,57(11),2312-2327.
MLA	Feng, Tao,et al."Formal Security Evaluation and Improvement of Industrial Ethernet EtherCAT Protocol".Jisuanji Yanjiu yu Fazhan/Computer Research and Development 57.11(2020):2312-2327.