{"id":"https://openalex.org/W4382315267","doi":"https://doi.org/10.1109/access.2023.3275443","title":"Protecting Modbus/TCP-Based Industrial Automation and Control Systems Using Message Authentication Codes","display_name":"Protecting Modbus/TCP-Based Industrial Automation and Control Systems Using Message Authentication Codes","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4382315267","doi":"https://doi.org/10.1109/access.2023.3275443"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3275443","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3275443","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10122945.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10122945.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067339189","display_name":"Filip Katuli\u0107","orcid":"https://orcid.org/0009-0001-7332-7843"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Filip Katuli\u0107","raw_affiliation_strings":["Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0009-0001-7332-7843","affiliations":[{"raw_affiliation_string":"Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090903170","display_name":"Damir Sumina","orcid":"https://orcid.org/0000-0001-8474-125X"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Damir Sumina","raw_affiliation_strings":["Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0001-8474-125X","affiliations":[{"raw_affiliation_string":"Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023734196","display_name":"Stjepan Gro\u0161","orcid":"https://orcid.org/0000-0001-6619-2859"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Stjepan Gro\u0161","raw_affiliation_strings":["Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0001-6619-2859","affiliations":[{"raw_affiliation_string":"Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064915950","display_name":"Igor Erceg","orcid":"https://orcid.org/0000-0002-2913-6249"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Igor Erceg","raw_affiliation_strings":["Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0002-2913-6249","affiliations":[{"raw_affiliation_string":"Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I181343428"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":6.9643,"has_fulltext":true,"cited_by_count":41,"citation_normalized_percentile":{"value":0.97570678,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"11","issue":null,"first_page":"47007","last_page":"47023"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":1.0,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":1.0,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/modbus","display_name":"Modbus","score":0.9784164428710938},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7235096096992493},{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.6298377513885498},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5965874195098877},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.5432302951812744},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5384234189987183},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5280776023864746},{"id":"https://openalex.org/keywords/ethernet","display_name":"Ethernet","score":0.511861264705658},{"id":"https://openalex.org/keywords/programmable-logic-controller","display_name":"Programmable logic controller","score":0.48645350337028503},{"id":"https://openalex.org/keywords/message-authentication-code","display_name":"Message authentication code","score":0.466695100069046},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39842885732650757},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.3531419038772583},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2459908127784729},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.15861788392066956},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.14282923936843872}],"concepts":[{"id":"https://openalex.org/C2776666747","wikidata":"https://www.wikidata.org/wiki/Q1135322","display_name":"Modbus","level":3,"score":0.9784164428710938},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7235096096992493},{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.6298377513885498},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5965874195098877},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.5432302951812744},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5384234189987183},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5280776023864746},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.511861264705658},{"id":"https://openalex.org/C37374048","wikidata":"https://www.wikidata.org/wiki/Q188674","display_name":"Programmable logic controller","level":2,"score":0.48645350337028503},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.466695100069046},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39842885732650757},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.3531419038772583},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2459908127784729},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.15861788392066956},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.14282923936843872},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2023.3275443","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3275443","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10122945.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:4388e4afca8943649bf8f9970e95d28c","is_oa":true,"landing_page_url":"https://doaj.org/article/4388e4afca8943649bf8f9970e95d28c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 47007-47023 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3275443","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3275443","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/10005208/10122945.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4699999988079071}],"awards":[{"id":"https://openalex.org/G8491597843","display_name":null,"funder_award_id":"KK.01.2.1.02.0009","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"}],"funders":[{"id":"https://openalex.org/F4320335322","display_name":"European Regional Development Fund","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4382315267.pdf","grobid_xml":"https://content.openalex.org/works/W4382315267.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1552238199","https://openalex.org/W1579904204","https://openalex.org/W1617459194","https://openalex.org/W1970412479","https://openalex.org/W1974853427","https://openalex.org/W1996960305","https://openalex.org/W1999189416","https://openalex.org/W2038865613","https://openalex.org/W2039427951","https://openalex.org/W2102662195","https://openalex.org/W2109116994","https://openalex.org/W2166253429","https://openalex.org/W2188579669","https://openalex.org/W2511508404","https://openalex.org/W2550453031","https://openalex.org/W2611735124","https://openalex.org/W2770804539","https://openalex.org/W2883185786","https://openalex.org/W2904712365","https://openalex.org/W2913707003","https://openalex.org/W2922901714","https://openalex.org/W2972160586","https://openalex.org/W3011824189","https://openalex.org/W3017165746","https://openalex.org/W3090288955","https://openalex.org/W3152746601","https://openalex.org/W3199280351","https://openalex.org/W4289532730","https://openalex.org/W4312915803"],"related_works":["https://openalex.org/W2117726577","https://openalex.org/W2361898737","https://openalex.org/W2115322934","https://openalex.org/W3011157599","https://openalex.org/W3030741396","https://openalex.org/W2765702057","https://openalex.org/W2480100730","https://openalex.org/W2392411935","https://openalex.org/W2499998484","https://openalex.org/W3013388283"],"abstract_inverted_index":{"Critical":[0],"infrastructure":[1],"(CI),":[2],"such":[3,37,55,220],"as":[4,56,137],"energy":[5],"and":[6,15,23,32,42,116,187],"water":[7],"distribution":[8],"systems,":[9],"is":[10,150],"essential":[11],"for":[12,75],"the":[13,18,28,34,47,77,118,121,127,151,163,167,178,204,217],"stability":[14],"well-being":[16],"of":[17,30,36,50,79,97,120,183,219],"modern":[19],"society.":[20],"Industrial":[21],"automation":[22],"control":[24],"systems":[25,38],"(IACSs)":[26],"form":[27],"backbone":[29],"CIs":[31],"enable":[33],"operation":[35],"in":[39,141,156,162,171,192,222],"a":[40,72,108,130,138,142],"safe":[41],"reliable":[43],"manner.":[44],"However,":[45],"with":[46,102],"increasing":[48],"use":[49],"industrial":[51],"Ethernet":[52],"communication":[53,98,184],"protocols,":[54],"Modbus-over-TCP":[57],"(Modbus/TCP),":[58],"once":[59],"air-gapped":[60],"IACSs":[61,81,194],"are":[62],"becoming":[63],"vulnerable":[64],"to":[65],"potential":[66],"cybersecurity":[67,78],"threats.":[68],"This":[69],"paper":[70],"presents":[71],"novel":[73,109],"method":[74,86,205],"enhancing":[76],"Modbus/TCP-based":[80],"by":[82],"implementing":[83],"an":[84,175],"authentication":[85,90],"based":[87],"on":[88],"message":[89],"codes":[91],"(MACs).":[92],"To":[93,124],"provide":[94],"partial":[95],"protection":[96,128,182,207,221],"even":[99],"when":[100],"communicating":[101],"legacy":[103],"Modbus/TCP":[104,189],"peers,":[105],"we":[106],"propose":[107],"supervising":[110],"device":[111],"that":[112,203],"analyzes":[113],"exchanged":[114],"messages":[115],"verifies":[117],"authenticity":[119],"protected":[122],"messages.":[123],"experimentally":[125],"verify":[126],"method,":[129],"water-treatment":[131],"cyber-physical":[132],"system":[133],"(CPS)":[134],"was":[135,160],"implemented":[136,161],"digital":[139],"twin":[140],"programmable":[143],"logic":[144],"controller":[145],"(PLC).":[146],"The":[147,200],"underlying":[148],"MAC":[149,154],"Chaskey-12,":[152],"lightweight":[153],"defined":[155,170],"IEC":[157,172],"29192-6.":[158],"It":[159],"PLC":[164],"program":[165],"using":[166],"programming":[168],"languages":[169],"61131-3.":[173],"As":[174],"additional":[176],"contribution,":[177],"presented":[179],"implementation":[180],"allows":[181],"between":[185],"PLCs":[186],"other":[188],"peers":[190],"installed":[191],"existing":[193],"without":[195,211],"hardware":[196],"or":[197],"firmware":[198],"modifications.":[199],"results":[201],"show":[202],"provides":[206],"against":[208],"network":[209],"attacks":[210],"significantly":[212],"affecting":[213],"performance,":[214],"also":[215],"demonstrating":[216],"feasibility":[218],"IACSs.":[223]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":5}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}
