PLC Guard: A practical defense against attacks on cyber-physical systems

Malchow, Jan-Ole; Marzin, Daniel; Klick, Johannes; Kovács, Róbert; Röth, Volker

doi:10.1109/cns.2015.7346843

Cited by 22 publications

(8 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There have been several research endeavors directed at addressing vulnerabilities in supervisory control and data acquisition (SCADA) networks [ 451 , 452 , 453 , 454 ]. Several research works have also been directed to addressing intrusion detection issues in programmable logic controllers (PLCs) [ 455 , 456 , 457 , 458 , 459 ]. While there is a patch work of activities meant to deter these attacks, there are several research opportunities in the cybersecurity of the Factory of the Future that need to be explored to address the challenges holistically.…”

Section: Discussion: Recommendations and Future Research Directionsmentioning

confidence: 99%

A Primer on the Factories of the Future

Anumbe

Saidy

Harik

2022

Sensors

View full text Add to dashboard Cite

In a dynamic and rapidly changing world, customers’ often conflicting demands have continued to evolve, outstripping the ability of the traditional factory to address modern-day production challenges. To fix these challenges, several manufacturing paradigms have been proposed. Some of these have monikers such as the smart factory, intelligent factory, digital factory, and cloud-based factory. Due to a lack of consensus on general nomenclature, the term Factory of the Future (or Future Factory) has been used in this paper as a collective euphemism for these paradigms. The Factory of the Future constitutes a creative convergence of multiple technologies, techniques, and capabilities that represent a significant change in current production capabilities, models, and practices. Using the semi-narrative research methodology in concert with the snowballing approach, the authors reviewed the open literature to understand the organizing principles behind the most common smart manufacturing paradigms with a view to developing a creative reference that articulates their shared characteristics and features under a collective lingua franca, viz., Factory of the Future. Serving as a review article and a reference monograph, the paper details the meanings, characteristics, technological framework, and applications of the modern factory and its various connotations. Amongst other objectives, it characterizes the next-generation factory and provides an overview of reference architectures/models that guide their structured development and deployment. Three advanced communication technologies capable of advancing the goals of the Factory of the Future and rapidly scaling advancements in the field are discussed. It was established that next-generation factories would be data rich environments. The realization of their ultimate value would depend on the ability of stakeholders to develop the appropriate infrastructure to extract, store, and process data to support decision making and process optimization.

show abstract

Section: Discussion: Recommendations and Future Research Directionsmentioning

confidence: 99%

A Primer on the Factories of the Future

Anumbe

Saidy

Harik

2022

Sensors

View full text Add to dashboard Cite

show abstract

“…This work seeks to solve the problem of engineering stations or HMIs being maliciously controlled to send malicious codes and commands to PLCs. Malchow et al [11] designed a PLC guard that decodes the MC 7 code of all Siemens PLC programs and compares it with previous versions by adding a guard between the PLCs and engineering stations. An engineer approves or rejects the code upload by physically interacting with the PLC guard.…”

Section: Related Workmentioning

confidence: 99%

PLC Protection System Based on Verification Separation

Xiao-jun¹,

Li²,

Li³

et al. 2022

Computers, Materials &Amp; Continua

View full text Add to dashboard Cite

Supervisory control and data acquisition systems (SCADAs) play an important role in supervising and controlling industrial production with the help of programmable logic controllers (PLCs) in industrial control systems (ICSs). A PLC receives the control information or program from a SCADA to control the production equipment and feeds the production data back to the SCADA. Once a SCADA is controlled by an attacker, it may threaten the safety of industrial production. The lack of security protection, such as identity authentication and encryption for industrial control protocols, increases the potential security risks. In this paper, we propose a PLC protection system combined with a monitor between a SCADA and a PLC and a physically separated monitoring station. By using the PLC protection system, identity verification and command verification are separated, and both the identity of the operator and the corresponding commands are recorded. Experiments show that even if the SCADA is controlled by an attacker, our system could still protect the PLC in the field and record the identity of the key command operator, which facilitates the tracing and forensics of malicious activities.

show abstract

“…; "yACSetpoint" TAK -R ; "yACSetpoint" -"yAC" * 0.1 T MD20 ; "Sum_AC" := "yACSetpoint" -'yAC" * 0. Malchow et al 36 presented a code comparing technique that provides various levels of graphical abstraction and summarization to ease the task of finding malicious modifications. And they also implemented a device called PLC-Guard to prevent the malicious code writing to PLC.…”

Section: F I G U R E 4 Reactor Explosion Attackmentioning

confidence: 99%

A malware detection method using satisfiability modulo theory model checking for the programmable logic controller system

Xie¹,

Chang

Jiang³

2020

Concurrency and Computation

View full text Add to dashboard Cite

Nowadays programmable logic controllers (PLCs) are suffering increasing cyberattacks. Attackers could reprogram PLCs to inject malware that would cause physical damages and economic losses. These PLC malwares are highly customized for the target which makes it difficult to extract a general pattern to detect them. In this article, we propose a PLC malware detection method based on model checking. Firstly, we improve the existing modeling method for PLC system by using the Satisfiability Modulo Theory (SMT) constraints to model the PLC system. We also present an algorithm that can transform the PLC program to the model. Our SMT-based model can deal with the features of the PLC system such as undetermined input signals, edge detection and so on. Secondly, we focus on malware detection and propose two methods, invariant extraction and rule design pattern, to generate detection rules. The former can extract the invariants from an original program, and the latter can lower the bar for user to design detection rules. Finally, we implement a prototype and evaluate it on three representative ICS scenarios. The evaluation result shows that our proposed method can successfully detect the malwares using four attack patterns.

show abstract

PLC Guard: A practical defense against attacks on cyber-physical systems

Cited by 22 publications

References 17 publications

A Primer on the Factories of the Future

A Primer on the Factories of the Future

PLC Protection System Based on Verification Separation

A malware detection method using satisfiability modulo theory model checking for the programmable logic controller system

Contact Info

Product

Resources

About