Sani, Abubakar Sadiq, Bertino, Elisa, Yuan, Dong and Dong, Zhao Yang (2023) A universally composable key exchange framework for operational technology communication protocols. In: 2023 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm). IEEE International Conference on Smart Grid Communications (SmartGridComm) . IEEE, Piscataway, New Jersey. ISBN 9781665455572 ISSN 2373-6836 (Print), 2474-2902 (Online) (doi:https://doi.org/10.1109/SmartGridComm57358.2023.10333944)

Preview

PDF (AAM) 443718_SANI_ A_universally_composable_key_exchange_framework_for_operational_technology.pdf - Accepted Version Download (530kB) | Preview

Abstract

Many real-world communication protocols in Operational Technology (OT) are prone to cyber attacks due to the absence of dedicated key exchange and inability to satisfy all key exchange properties such as mutual authentication, key secrecy, and key confirmation. Besides these deficiencies, the security of communications in the OT is severely lacking at least one of the communication security properties such as data integrity, data confidentiality, and data availability. In this paper, we propose to enhance OT communication protocols via a secure key exchange framework for satisfying the key exchange and communication security properties based on universal composability, which provides modular design and analysis of cryptographic protocols in the presence of an adversary. Our framework comprises an ideal crypto-ops functionality (F_cl) for modelling and satisfying the key exchange and communication security properties. We analyse the security of our framework using the Automated Validation of Internet of Security Protocols and Applications (AVISPA) tool. Furthermore, we illustrate the usefulness of our framework by fixing one of the most widely used real-world OT communication protocols, namely WirelessHART.

Item Type:	Conference Proceedings
Title of Proceedings:	2023 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)
Uncontrolled Keywords:	operational technology; key exchange; communication security; universal composability; communication protocols
Subjects:	H Social Sciences > HD Industries. Land use. Labor > HD61 Risk Management Q Science > QA Mathematics > QA75 Electronic computers. Computer science Q Science > QA Mathematics > QA76 Computer software
Faculty / School / Research Centre / Research Group:	Faculty of Engineering & Science Faculty of Engineering & Science > School of Computing & Mathematical Sciences (CMS)
Related URLs:	Organisation
Last Modified:	12 Dec 2023 11:23
URI:	http://gala.gre.ac.uk/id/eprint/44371

Actions (login required)

View Item

Downloads