Did you know that DNP3 actually *does* have authentication baked in? DNP3-Secure Authentication v5 has been out since 2012 and version 6 is currently under development. Several major vendors have put SAv5 support in their products. Unfortunately, end users are very slow to adopt secure authentication.

The same authentication method is in IEC 104, and 61850 as well.