The Modbus Protocol Vulnerability Test in Industrial Control Systems

Chang, Hung-Chang; Lin, Chinho; Liao, Da-Jyun; Koo, Tung-Ming

doi:10.1109/cyberc49757.2020.00070

Cited by 7 publications

(4 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Partial validation was performed on a test bed, which was a replica of a gas pipeline system and a storage tank. Details regarding the implementation of all 28 attacks were later given in [1], where the so-called Honeypot environment was used for verification. Some of MITM/DoS attacks from [16] were demonstrated in [17], [18], where a real-time simulation test bed was presented for smart power grid cyber security analysis.…”

Section: Related Workmentioning

confidence: 99%

“…Building on research presented in [1], [11]- [16], this paper gives an updated and extended summary of the reported attacks against Modbus, easily understandable by the ICS community. Detailed analysis of off-the-shelf available IT solutions for ICSs penetration is given as well, the aim being to increase the awareness of existence of such tools.…”

Section: Related Workmentioning

confidence: 99%

“…Developed in 1979 by Modicon (now Schneider Electric), Modbus communication protocol represents a standard for data exchange in ICSs [2], [10]. Accessibility and flexibility, ease of implementation and relatively simple maintenance when compared with other protocols [1], [10], made this protocol the first choice for many ICS equipment manufacturers. Based on these advantages and the fact that it allows communication between different devices made by different vendors, Modbus protocol (versions TCP and RTU) can today be found as basis for many IoT technologies.…”

Section: Modbus Communication Protocol and Man-in-the-middle Cyber At...mentioning

confidence: 99%

“…In the past, an ICS was built to operate in a closed network, hence, industrial equipment and communication protocols were designed without security aspects being taken into account. Nowadays, in order to improve operational efficiency and to reduce costs (in other words, to integrate an ICS into the Internet of Things (IoT)), these closed systems are connected to the internet on a regular basis, making them an easy target for cyber threats [1]- [3]. Although nowadays attacks on ICSs and corresponding protocols are not a new occurrence, in the last decade or so a significant increase in the frequency of such attacks has been recorded [4], [5].…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Off-the-Shelf Solutions as Potential Cyber Threats to Industrial Environments and Simple-To-Implement Protection Methodology

et al. 2022

View full text Add to dashboard Cite

The paper investigates cyber threats and potential solutions for protecting industrial control systems (ICS). On the cyber threats side, different off-the-shelf offensive solutions, both hardware and software, are analysed and tested. The goal of the paper is to increase cyber threat awareness by showing how such off-the-shelf solutions, well known to IT security experts, can be utilised as (or inspire) attack vectors to gain access to generally unprotected industrial plants. After obtaining an accessing point, Man-in-the-Middle (MITM) and Legal-Client-to-Server (LCSA) types of attacks from reconnaissance, client-to-server and server-to-client categories are demonstrated. For this purpose, a Modbus communication protocol implemented in a real compressor station is used as basis. Regarding potential protection solutions, the paper proposes a simple-to-implement and cheap hardening methodology applicable inside almost any industrial plant. A novel, PLC-based ICS cyber security protection method, made of a signal validity monitoring mechanism and a control system integrity check mechanism is also discussed and demonstrated. Both penetration testing and hardening methodology are verified experimentally, using real PLC and HMI devices.INDEX TERMS ICS, industrial cyber security, attacking vectors, MITM attacks, hardening methodology, signal validity monitoring, control system integrity check.

show abstract