A Comparison of Security ICS Communication Protocols
摘要
This paper presents a summary and comparison of leading secure Industrial Control System (ICS) communication protocols. We find two categories of ICS protocols: those that run an insecure ICS protocol over TLS and those that use a bespoke security protocol. We assess the key properties of bespoke ICS protocols using formal modelling, for OPC-UA and DNP3-SAv5 we use existing models, and we build formal models for S7Comm-Plus and SSP-21; this lets us make a full comparison between these protocols. For ICS protocols based on TLS, we compare the versions and configurations of TLS specified, and any access control add-ons. This leads to a detailed picture of the security provided and best use cases for each protocol.