NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA SYSTEM
CLASSIFICATION

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Agenda
 Introduction  History  What is SCADA?  Classifications of a SCADA system  Elements of SCADA system?  Where is SCADA used?  What types of SCADA are there?  Purpose of this research  Conclusion

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Introduction
SCADA (Supervisory Control and Data Acquisition) System

 History  Why SCADA?  Definition of SCADA

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

History
 Egyptian supervisory

 First half of the 20th century  Development from telemetry system  Weather predictions  Rail road tracks  Two way system  1960s idea for supervisory  1970s radio system
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Why SCADA?
and Money  Less traveling for workers (e.g. helicopter ride)  Reduces man-power needs man Increases production efficiency of a company  Cost effective for power systems  Saves energy  Reliable  Supervisory control over a particular system
 Saves Time

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

What is SCADA?
 Supervisory Control and Data Acquisition  Supervisory  Operator/s, engineer/s, supervisor/s, etc  Control  Monitoring  Limited  Telemetry  Remote/Local  Data acquisition  Access and acquire information or data from the equipment  Sends it to different sites through telemetry  Analog / Digital
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Classifications
 Anatomy of a SCADA system?  Elements of SCADA  Levels of SCADA  Where is SCADA used?  Different applications of SCADA systems?  What types of SCADA are there?  Component manufacturers and system manufacturers of the SCADA systems?  Automation Solutions  Software  Hardware
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Elements of SCADA
Elements of a SCADA system  Sensors and actuators  RTUs/PLCs  Communication  MTU  Front End Processor  SCADA server  Historical/Redundant/Safety Server  HMI computer  HMI software
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Sensors
Types of sensors:  Pressure sensors  Temperature sensors  Light sensors  Humidity sensors  Wind speed sensors  Water level sensors  Distance sensors
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Actuators
Actuators:  Valves  Pumps  Motors

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

10

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

RTUs
RTU Remote Terminal Unit  Intelligent to control a process and multiple processes  Data logging and alarm handling  Expandable  Asks the field devices for information  Can control IEDs (Intelligent Electronic Device)  Slave/Master device

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

11

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Alarms
Types of alarms:  Good alarms  Critical failure alarms

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

12

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Safety instrumented systems

Actions:  Override the normal control system  Take over the actuators

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

13

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

PLCs
PLC Programmable Logic Controller  Ladder logic  Industrial computer that replaced relays  Not a protocol converter  Cannot control IEDs  Communication compatibilities  Takes actions based on its inputs

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

14

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Communication
Communication systems:  Switched Telephone Network  Leased lines  Private Network (LAN/RS-485) (LAN/RS Internet  Wireless Communication systems  Wireless LAN  Global System for Mobile Communication (GSM) Network  Radio modems
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

15

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Communication cont.
Protocols:  MODBUS  DNP 3.0  Fieldbus  Controller Area Network (CAN)  Profibus  DirectNet  TCP/IP  Ethernet
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

16

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Front End Processor

Front End Processor  Gathers all communications and converts them into SCADA friendly communication  Communication interface between several RTU channels and the host Master Station computer

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

17

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA server
SCADA Server  It can be a Web server  Data logging  Analyzing data  Serve the clients through a firewall  Clients connected in the corporation or connected outside through internet  Real-time decision maker Real Asks RTU for information
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

18

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Historical server
Historical/Safety/Redundant Server  Logs the data from the SCADA server and stores it as a backup, in case of a disaster  It is basically a safety server

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

19

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

HMI Computer
Human Machine Interface Computer  Access on the SCADA Server  Control the system  Operator Interface  Software  User friendly  Programmable (C, C++)

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

20

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

DCS
DCS Distributed Control System  Process oriented tendency to do something  Not event oriented does not depend on circumstances  Local control over the devices  Subordinate to SCADA

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

21

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Levels of SCADA
Four levels of SCADA system
 Level IV - Enterprise  Corporate LAN/WAN  World Wide Web  Virtual Private Network  Firewall for remote users  Level III SCADA / MTU  Operator Workstations  Control  Engineering Workstations  Servers Data logging
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

22

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Levels of SCADA cont.

Four levels of SCADA system
 Level II Telecommunication  Fiber  Radio  Telephone leased line  Protocols  Level I Field  Devices  RTUs / PLCs  Sensors
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

23

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Level IV - Enterprise

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

24

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Level III - SCADA

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

25

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Level II and I
Telecommunication and Field

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

26

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Where is SCADA used?

Main SCADA applications:  Water and Wastewater  Power  Oil and Gas  Research facilities  Transportation  Security systems  Siren systems  Irrigation  Communication control
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

27

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

U.S. Infrastructure

Courtesy of Infrastructure Assurance Center

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

28

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA examples
SCADA examples:

 Gas control systems  Water control systems  Power systems

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

29

Gas SCADA

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

30

Water SCADA

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

31

Power SCADA

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

power control
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

32

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA system types

Three types of basic SCADA systems:  Basic SCADA  One machine process  One RTU and MTU  Integrated SCADA  Multiple RTUs  DCS  Networked SCADA  Multiple SCADA
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

33

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Basic SCADA

Car manufacturing robot  Room temperature control

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

34

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Integrated SCADA
 Water systems  Subway systems  Security systems

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

35

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Networked SCADA
 Power systems  Communication systems

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

36

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Automation solutions
SCADA system manufacturers  Modular SCADA, UK  MOSCAD, Motorola  Rockwell Automation  ABCO  ABB  Lantronix

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

37

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA Hardware
SCADA Hardware manufacturers  Rockwell Allen Bradley  General Electric (GE)  Emerson  Schneider Electric

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

38

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

SCADA Software
SCADA Software manufacturers  Intellution (Fix 32)  Iconics (Genesis32 v7.0)  Wonderware (InTouch)  Citect (CitectSCADA 5.42)  National Instruments (Lookout SCADA)

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

39

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Purpose of this research

 Develop a teaching module for a general SCADA system  Develop a general model of a SCADA system  Use LabView and wireless communication computers to illustrate an example of the SCADA system  Study the vulnerabilities of the SCADA system  Create a freshman introduction module  Create an upper level course for SCADA

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

40

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

What is next?
 Use the Laptop1 to generate the wells, tanks, servers, RTUs PLCs and the front end processor through SubVIs  Use the Laptop2 to be the HMI Computer that connects to Laptop1 and reads the data and also affect the devices  And Laptop3 to simulate an attack at the SCADA system

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

41

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Conclusion
 There are thousands of SCADA systems installed and they can be completely different from each other, in terms of their structures but they all have common elements and a common purpose to supervise control and collect data.  There are three types of SCADA systems that describe all of the SCADA systems.  Communication is the most significant part of SCADA  Power and communication systems are most likely to get attacked by terrorists.
SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

42

NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY

Discussion

SCADA SYSTEMS CLASSIFICATIONS (ILIA DORMISHEV, KRENAR KOMONI)

43