{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T02:37:45Z","timestamp":1760150265512,"version":"build-2065373602"},"reference-count":40,"publisher":"MDPI AG","issue":"11","license":[{"start":{"date-parts":[[2023,10,29]],"date-time":"2023-10-29T00:00:00Z","timestamp":1698537600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Natural Science Foundation of China","award":["62162039","61762060"],"award-info":[{"award-number":["62162039","61762060"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>The integration of buses in industrial control systems, fueled by advancements such as the Internet of Things (IoT), has led to their widespread adoption, significantly enhancing operational efficiency. However, with the increasing interconnection of systems, ensuring the security of bus communications and protocols has become an urgent priority. This paper focuses on addressing the specific security concerns associated with the widely adopted INTERBUS protocol\u2014a fieldbus protocol. Our approach leverages the theory of colored Petri nets (CPN) for modeling, enabling a comprehensive analysis of the protocol\u2019s security. Rigorous formal verification and analysis of the security protocol are conducted by employing the Dolev\u2013Yao adversary model. Our investigation reveals the presence of three critical vulnerabilities: replay attacks, tampering, and impersonation. To fortify the security of the protocol, we propose the introduction of a key distribution center and the utilization of hash values. Through meticulous analysis and verification, our proposed enhancements effectively reinforce the security performance of the INTERBUS protocol.<\/jats:p>","DOI":"10.3390\/info14110589","type":"journal-article","created":{"date-parts":[[2023,10,30]],"date-time":"2023-10-30T13:20:07Z","timestamp":1698672007000},"page":"589","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Security Analysis and Enhancement of INTERBUS Protocol in ICS Based on Colored Petri Net"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1611-9017","authenticated-orcid":false,"given":"Tao","family":"Feng","sequence":"first","affiliation":[{"name":"School of Computer and Communication, Lanzhou University of Technology, Lanzhou 730050, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chengfan","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer and Communication, Lanzhou University of Technology, Lanzhou 730050, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiang","family":"Gong","sequence":"additional","affiliation":[{"name":"School of Computer and Communication, Lanzhou University of Technology, Lanzhou 730050, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8523-9595","authenticated-orcid":false,"given":"Ye","family":"Lu","sequence":"additional","affiliation":[{"name":"School of Computer and Communication, Lanzhou University of Technology, Lanzhou 730050, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,10,29]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"52","DOI":"10.1016\/j.ijcip.2015.02.002","article-title":"A survey of cyber security management in industrial control systems","volume":"9","author":"Knowles","year":"2015","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"ref_2","unstructured":"Wieczorek, F., Krau\u00df, C., Schiller, F., and Eckert, C. (2012). International Conference on Computer Safety, Reliability, and Security, Springer."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1016\/S0019-0578(97)00006-2","article-title":"Network security considerations in TCP\/IP-based manufacturing automation","volume":"36","author":"dePriest","year":"1997","journal-title":"ISA Trans."},{"key":"ref_4","first-page":"30","article-title":"Industrial information integration-A literature review 2006\u20132015","volume":"2","author":"Chen","year":"2016","journal-title":"J. Ind. Inf. Integr."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"498","DOI":"10.1016\/j.cose.2006.03.001","article-title":"Security issues in SCADA networks","volume":"25","author":"Igure","year":"2006","journal-title":"Comput. Secur."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1109\/MSP.2008.150","article-title":"Security for process control systems: An overview","volume":"6","author":"Naedele","year":"2008","journal-title":"IEEE Secur. Priv."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1109\/MSP.2005.136","article-title":"Trends in process control systems security","volume":"3","author":"Miller","year":"2005","journal-title":"IEEE Secur. Priv."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"583","DOI":"10.1016\/j.isatra.2007.04.003","article-title":"Cyber security risk assessment for SCADA and DCS networks","volume":"46","author":"Ralston","year":"2007","journal-title":"ISA Trans."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Pi\u00e8tre-Cambac\u00e9d\u00e8s, L., and Sitbon, P. (2008, January 24\u201326). Cryptographic key management for SCADA systems-issues and perspectives. Proceedings of the 2008 International Conference on Information Security and Assurance (ISA 2008), Busan, Republic of Korea.","DOI":"10.1109\/ISA.2008.77"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Fovino, I.N., Carcano, A., Masera, M., and Trombetta, A. (2009, January 23\u201325). Design and implementation of a secure Modbus protocol. Proceedings of the International Conference on Critical Infrastructure Protection, Hanover, NH, USA.","DOI":"10.1007\/978-3-642-04798-5_6"},{"key":"ref_11","unstructured":"Davidson, C.C., Andel, T.R., Yampolskiy, M., McDonald, J.T., Glisson, W.B., and Thomas, T. (2018, January 8\u20139). On scada plc and fieldbus cyber-security. Proceedings of the 13th International Conference on Cyber Warfare and Security, Washington, DC, USA."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"860","DOI":"10.1109\/SURV.2012.071812.00124","article-title":"Introduction to industrial control networks","volume":"15","author":"Galloway","year":"2012","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"35","DOI":"10.1016\/S1367-5788(98)00003-0","article-title":"A review of the fieldbuses","volume":"22","author":"Thomesse","year":"1998","journal-title":"Annu. Rev. Control."},{"key":"ref_14","unstructured":"Treytl, A., Sauter, T., and Schwaiger, C. (2004, January 22\u201324). Security measures for industrial fieldbus systems\u2014State of the art and solutions for IP-based approaches. Proceedings of the IEEE International Workshop on Factory Communication Systems, Vienna, Austria."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Peserico, G., Morato, A., Tramarin, F., and Vitturi, S. (2021). Functional Safety Networks and Protocols in the Industrial Internet of Things Era. Sensors, 21.","DOI":"10.3390\/s21186073"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Luo, X., and Li, Y. (2019). Research and implementation of Modbus TCP security enhancement protocol. J. Phys. Conf. Ser., 1213.","DOI":"10.1088\/1742-6596\/1213\/5\/052058"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Wang, Q., and Sawhney, S. (2014, January 27\u201329). VeCure: A practical security framework to protect the CAN bus of vehicles. Proceedings of the 2014 International Conference on the Internet of Things (IOT), Barcelona, Spain.","DOI":"10.1109\/IOT.2014.7030108"},{"key":"ref_18","unstructured":"Zhou, Y., Chai, D., Liu, M., Lin, F., Shang, W., and Wang, L. (July, January 29). Research on the security mechanism for interconnection between PROFIBUS and the Internet. Proceedings of the 11th World Congress on Intelligent Control and Automation, Shenyang, China."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Doebbert, T.R., Fischer, F., Merli, D., and Scholl, G. (2022). On the Security of IO-Link Wireless Communication in the Safety Domain. arXiv.","DOI":"10.1109\/ETFA52439.2022.9921464"},{"key":"ref_20","unstructured":"Club, I. (2003). Fieldbus Technology, Springer."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Meyer-Gr\u00e4fe, K. (September, January 31). Interbus in safety critical applications. Proceedings of the 1999 European Control Conference (ECC), Karlsruhe, Germany.","DOI":"10.23919\/ECC.1999.7099298"},{"key":"ref_22","unstructured":"Cremers, C.J. (2008). Computer Aided Verification: 20th International Conference, CAV 2008, Princeton, NJ, USA, 7\u201314 July 2008, Springer."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"1914","DOI":"10.1007\/s00145-020-09360-1","article-title":"A formal security analysis of the signal messaging protocol","volume":"33","author":"Cremers","year":"2020","journal-title":"J. Cryptol."},{"key":"ref_24","unstructured":"Meier, S., Schmidt, B., Cremers, C., and Basin, D. (2013). Computer Aided Verification: 25th International Conference, CAV 2013, Saint Petersburg, Russia, 13\u201319 July 2013, Springer."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Boyukov, T., Andonov, V., and Atanassov, K. (2022, January 12\u201314). Generalized net model of the connections between different types of transport in Bulgaria. Proceedings of the 2022 IEEE 11th International Conference on Intelligent Systems (IS), Warsaw, Poland.","DOI":"10.1109\/IS57118.2022.10019720"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"389","DOI":"10.1109\/TSMC.2016.2598303","article-title":"Petri net modelling and scheduling of a close-down process for time-constrained single-arm cluster tools","volume":"48","author":"Zhu","year":"2016","journal-title":"IEEE Trans. Syst. Man Cybern. Syst."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Jensen, K. (1996). Advanced Course on Petri Nets, Springer.","DOI":"10.1007\/978-3-662-03241-1"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Zhu, Q., Qin, Y., Zhao, Y., and Zhou, C. (2020). A hierarchical coloured Petri net-based cyberattacks response strategy making approach for critical infrastructures. Int. J. Distrib. Sens. Netw., 16.","DOI":"10.1177\/1550147719889808"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Van der Aalst, W.M.P., and Best, E. (2003). Applications and Theory of Petri Nets 2003, Springer. ICATPN 2003. Lecture Notes in Computer Science;.","DOI":"10.1007\/3-540-44919-1"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"I Bokova, O., Kanavin, S.V., A Meshcheryakov, V., and Khokhlov, N.S. (2020). Information security system model in the automated system developed in the simulation software environment CPN Tools. J. Phys. Conf. Ser., 1479.","DOI":"10.1088\/1742-6596\/1479\/1\/012021"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1007\/s10009-007-0038-x","article-title":"Coloured Petri Nets and CPN Tools for modelling and validation of concurrent systems","volume":"9","author":"Jensen","year":"2007","journal-title":"Int. J. Softw. Tools Technol. Transf."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Amadio, R.M., and Charatonik, W. (2002, January 20\u201323). On name generation and set-based analysis in the Dolev-Yao model. Proceedings of the International Conference on Concurrency Theory, Brno, Czech Republic.","DOI":"10.1007\/3-540-45694-5_33"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Baskar, A., Ramanujam, R., and Suresh, S. (2019, January 22\u201325). Dolev-yao theory with associative blind pair operators. Proceedings of the International Conference on Implementation and Application of Automata, Kosice, Slovakia.","DOI":"10.1007\/978-3-030-23679-3_5"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Rocchetto, M., and Tippenhauer, N.O. (2016, January 14\u201318). CPDY: Extending the Dolev-Yao attacker with physical-layer interactions. Proceedings of the International Conference on Formal Engineering Methods, Tokyo, Japan.","DOI":"10.1007\/978-3-319-47846-3_12"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"263","DOI":"10.1007\/s00145-004-0312-y","article-title":"A one round protocol for tripartite Diffie-Hellman","volume":"17","author":"Joux","year":"2004","journal-title":"J. Cryptol."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"3033","DOI":"10.1109\/TII.2021.3109436","article-title":"A cpn-based approach for studying impacts of communication delays on safety and availability of safety-critical distributed","volume":"18","author":"Wu","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Nyangaresi, V.O. (2021, January 13\u201315). ECC-based authentication scheme for smart homes. Proceedings of the 2021 International Symposium ELMAR, Zadar, Croatia.","DOI":"10.1109\/ELMAR52657.2021.9550911"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Bhurke, A.U., and Kazi, F. (2021, January 27\u201329). Methods of Formal Analysis for ICS Protocols and HART-IP CPN modelling. Proceedings of the 2021 Asian Conference on Innovation in Technology (ASIANCON), PUNE, India.","DOI":"10.1109\/ASIANCON51346.2021.9544603"},{"key":"ref_39","unstructured":"Thomesse, J.P. (2002, January 5\u20137). Fieldbuses and quality of service. Proceedings of the 5th Portuguese Conference on Automatic Control, Aveiro, Portugal."},{"key":"ref_40","unstructured":"Jasperneite, J.\u00dc. (2017). Industrial Communication Technology Handbook, CRC Press."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/14\/11\/589\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T21:13:49Z","timestamp":1760130829000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/14\/11\/589"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,29]]},"references-count":40,"journal-issue":{"issue":"11","published-online":{"date-parts":[[2023,11]]}},"alternative-id":["info14110589"],"URL":"https:\/\/doi.org\/10.3390\/info14110589","relation":{},"ISSN":["2078-2489"],"issn-type":[{"type":"electronic","value":"2078-2489"}],"subject":[],"published":{"date-parts":[[2023,10,29]]}}}