NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY SCADA MODEL SYSTEM COMPONENTS SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 1
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY RTU Remote Terminal Unit Ø What is a RTU? Ø Where does it fit in a SCADA System? Ø RTU components Ø Basic types of RTU modules SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 2
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY RTU Components Ø Power supply Ø Back-up battery Ø Radio module Ø 4 – 15 I/O modules SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 3
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY RTU Modules Ø Digital Modules – two I/O states § Digital Monitor Module (DMM) § Digital Control Module (DCM) § Pulse Accumulator Module (PAM) SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 4
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY RTU Modules Ø Support Modules – no I/O functions § Power Supply Module (PSM) § Radio Interface Module (RIM) § Computer Interface Module (CIM) § Bus Extender Module (BIM) SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 5
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY RTU Modules Ø Analog Modules – numerical control/monitor § Analog Monitor Module (AMM) § Analog Control Module (ACM) SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 6
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY RTU Modules Ø Controllers – Logical modules perform complete closed loop, automatic control functions § Pump Control Module (PCM) § Programmable Logic Controller (PLC) § Pump Control Unit (PCU) SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 7
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY PLC Programmable Logic Controller Ø What is a PLC? Ø History of PLCs Ø Where does it fit in SCADA Systems? Ø PLC architecture SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 8
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY PLC Architecture Data memory Program memory Control unit Input devices Process actuators Output devices Process sensors Programming module or PC SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 9
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY MTU Master Terminal Unit Ø What is a MTU? Ø Where does it fit in a SCADA System? Ø MTU components SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 10
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY MTU Components Ø Operator Ø Personal Computer Ø Human Machine Interface (HMI) Ø Historical Datalogging Ø Monitoring Ø Limited Control SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 11
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY COMMUNICATION SYSTEMS Ø PSTN Network Ø Leased Lines Ø Internet Ø Wireless Ø LAN Ø Global System for Mobiles (GSM) Ø Radio modems SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 12
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY COMMUNICATION COMPONENTS Ø Field. Bus Ø What is Field. Bus? Ø History of Field. Bus Ø Advantages Ø Topologies (Bus/Daisy Chain/Tree) Ø Where does it fit in a SCADA System? SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 13
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY FIELDBUS What it is? Ø It is a BUS. § A wire or set of wires connecting more than two devices Ø Replace existing 4 -20 m. A analogue signal Ø Serial Bus Ø Digital communication between devices SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 14
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY FIELDBUS History Ø 1940 s pressure signals 3 -15 psi Ø 1960 s the 4 -20 m. A analogue signals Ø 1970 s digital processors for centralized control. SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 15
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY FIELDBUS Advantages Ø Reduces wiring Ø Online diagnostics out on individual field devices Ø Two-way communication between the field devices and the controllers Ø Deterministic – no collision and it is scheduled Ø It is getting widely used in process control SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 16
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY FIELDBUS TOPOLOGIES SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 17
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY FIELDBUS TOPOLOGIES SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 18
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY FIELDBUS TOPOLOGIES SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 19
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY FIELDBUS TOPOLOGIES SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 20
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY COMMUNICATION COMPONENTS Ø Ethernet Ø What is Ethernet? Ø History of Ethernet Ø Non-deterministic Ø Topologies Ø Where does it fit in a SCADA System? SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 21
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY ETHERNET What it is? Ø Type of network cabling Ø It is a Local Area Network LAN Ø It is the Physical and the Data Link Layer SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 22
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY ETHERNET History Ø XEROX in the 1970’s Ø Network cabling and signaling Ø IEEE 802. 3 standard SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 23
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY ETHERNET Topology Thick Ethernet Segment – Bus Topology SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 24
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY ETHERNET Topology Thin Ethernet Segment – Bus Topology SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 25
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY ETHERNET Topology 10 Base-T (also Fiber) – Star Topology SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 26
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY COMMUNICATION PROTOCOLS Ø User Datagram Protocol (UDP) Ø Modicon Bus (MODBUS) Ø Distributed Network Protocol (DNP 3. 0) SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 27
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY Protocol Defined A set of conventions governing the treatment and expecially the formatting of data in an electronic communication system. (Merriam Webster 10 th Ed. ) SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 28
COMPARISON OF NON-PROPRIETARY SCADA PROTOCOLS Feature UDP DNP 3. 0 MODBUS OSI Layers 1 3 1 # Users Unlimited 1000 s >500 Time Stamped Events NO YES NO Peer 2 Peer NO YES NO Unsolicited Slaves Do NO Not Need To Be Polled YES NO Secure File Transfer NO YES NO Broadcast Capability YES NO File Segmentation NO YES NO? (dnp users) 29
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY Data Framing Modbus Data Frame SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 30
NORWICH UNIVERISTY CENTER OF EXELLENCE IN DISTRIBUTED CONTROL SYSTEM SECURITY Performance Characteristics ØSPEED UDP ØSECURITY DNP 3. 0 ØFLEXIBILITY DNP 3. 0 ØTEACHING CAPACITY? SCADA MODEL SYSTEM COMPONENETS (MATTHEW LESSARD, ILIA DORMISHEV, KRENAR KOMONI) 31
CONCLUSION • Discussion/Questions 32
- Slides: 32