Security solution for semantic SCADA optimized by ECC mixed coordinates

Abstract

International audienceWeb services have become a significant part of embedded systems as SCADA and internet applications embedded in RTU, because (WS) was XML/SOAP support, independent to platform and very simple to use, these advantages make (WS) vulnerable to many new and old security attacks. Now, it becomes easier to attack (WS) because their semantic data is publicly accessible in UDDI registry and (WS) use http protocol and the 80 TCP port as an open tunneling as a very big vulnerability. In this article we proposes new security solution for SCADA system, a new implementation of security protocols (SSL/TLS, IPSEC, HTTPS) and the WS-Security framework. In our solution implemented WS-Security framework optimized for SCADA in ten (10) steps, we use mixed coordinates ECC cryptography, we propose in this article our (Mixed-Coordinates-ECC) algorithm for optimizing the semantic security solution based on WS-Security framework and to adapt it to embedded complex systems as SCADA RTU using semantic distributed bloc (I/F/AV) and security ontology's