PLC Cyber-Security Challenges in Industrial Networks

Ramirez, Ramiro A.; Chang, Chun-Kai; Liang, Shu-Hao

doi:10.1109/mesa55290.2022.10004463

Cited by 9 publications

(3 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, a list of the multiple industrial communication networks and their components presents the comprehensive networks and depicts a brief system network architecture connection. This work is an extension of the previous research conducted by Ramiro et al [33].…”

Section: Methodssupporting

confidence: 57%

PLC Cybersecurity Test Platform Establishment and Cyberattack Practice

2023

Self Cite

View full text Add to dashboard Cite

Programming logic controllers (PLCs) are vital components for conveyors in production lines, and the sensors and actuators controlled underneath the PLCs represent critical points in the manufacturing process. Attacks targeting the exploitation of PLC vulnerabilities have been on the rise recently. In this study, a PLC test platform aims to analyze the vulnerabilities of a typical industrial setup and perform cyberattack exercises to review the system cybersecurity challenges. The PLC test platform is a sorting machine consisting of an automatic conveyor belt, two Mitsubishi FX5U-32M PLCs, and accessories for material sorting, and Modbus is the selected protocol for data communication. The O.S. on the attacker is Kali ver. 2022.3, runs Nmap and Metasploit to exploit the target Modbus registers. On the other hand, the target host runs the O.S., Ubuntu 22.04 in the cyberattack exercises. The selected attack method for this study is packet reply which can halt operations sending custom data packets to the PLC. In summary, this study provides a basic step-by-step offensive strategy targeting register modification, and the testbed represents a typical industrial environment and its vulnerabilities against cyberattacks with common open-source tools.

show abstract

Section: Methodssupporting

confidence: 57%

PLC Cybersecurity Test Platform Establishment and Cyberattack Practice

2023

Self Cite

View full text Add to dashboard Cite

show abstract

“…Interoperability issues among diverse devices and communication protocols further complicate the establishment of consistent security measures. Moreover, the limited computing resources inherent to PLCs necessitate a delicate balance between robust security implementations and optimal system performance [234], [235]. Real-time monitoring difficulties, human errors, and stringent regulatory compliance demands further amplify the complexity of securing PLCs.…”

Section: Security Solutions Challengesmentioning

confidence: 99%

Security of Programmable Logic Controllers and Related Systems: Today and Tomorrow

Alsabbagh,

Langendörfer

2023

IEEE Open J. Ind. Electron. Soc.

View full text Add to dashboard Cite

Programmable Logic Controllers (PLCs) are indispensable in Critical Infrastructures (CIs) and Industrial Control Systems (ICSs). The increasing demand for enhanced cost-effectiveness and production efficiency has driven automation manufacturers to integrate PLC based applications and systems with external networks, such as Internet. Unfortunately, this connectivity has exposed systems to potential malicious attacks from motivated adversaries. Addressing this pressing issue necessitates a comprehensive summary of ongoing research related to PLCs and their related systems. This summary should classify these systems based on disclosed vulnerabilities, potential threats, and proposed security solutions, catering to both scientists and industrial engineers. While several recent surveys have reviewed and discussed PLC security and related topics, they often fell short of covering all essential aspects comprehensively. Furthermore, prior surveys tended to focus on analyzing vulnerabilities at the system level, overlooking the vulnerabilities specific to PLCs themselves. Consequently, their findings failed to effectively secure current operational systems or propose improved solutions for future PLC designs. In this paper, we bridge this research gap by providing a detailed review of all aspects concerning the security of PLCs and related systems. This includes vulnerabilities, potential attacks, security solutions including digital forensics. We aim to offer a precise analysis, addressing the shortcomings of previous studies. Finally, we conclude the paper by presenting our recommendations tailored for PLC manufacturers, researchers and engineers. We hope that these recommendations will contribute to the development of more secure PLCs in the future.

show abstract

“…With the advent of the Industrial Internet or Industrial Internet of Things (IIoT), the integration of traditional industrial systems with cutting‐edge IoT technologies has become crucial for enhancing processes, efficiency, and productivity 1 . The IIoT leverages real‐time data to optimize processes, enable predictive maintenance, facilitate advanced analytics, and support intelligent decision‐making 2 . In the era of industrial Internet, the rapid development of Programmable Logic Controllers (PLCs) by various entities has resulted in a diverse range of architectures, operating systems, and software development environments 3,4 .…”

Section: Introductionmentioning

confidence: 99%

Domain‐specific translation tool from structured text to C source code with code readability enhancement in programmable logic controllers

Han,

Li,

Deng

et al. 2024

Concurrency and Computation

View full text Add to dashboard Cite

The Industrial Internet has emerged as a key technology in the field of industrial automation, revolutionizing traditional manufacturing processes and enabling advanced control systems by integrating machines, sensors, and software systems through network connectivity, allowing for real‐time data exchange, analysis, and decision‐making in industrial environments. Programmable Logic Controllers (PLCs) play a critical role in industrial automation systems, which are specialized digital computers designed to control various manufacturing processes and machinery. As a promising language, Structured Text (ST) is of paramount importance for industrial Internet, and it is essential to translate ST into C, which is widely used in various industries for implementing control systems. However, due to differences in syntax, data types, and programming paradigms between the two languages, the translation process is facing several challenges. In this paper, we present a domain‐specific translation tool that automates the process of converting ST code to C code. This tool incorporates advanced AI techniques, particularly leveraging the capabilities of NL‐PL LLMs, to facilitate accurate and efficient translation while generating comprehensive documentation to assist developers. Finally, the evaluation and case studies conducted validate the effectiveness of the tool, demonstrating its practical applicability and benefits in real‐world industrial settings.

show abstract

PLC Cyber-Security Challenges in Industrial Networks

Cited by 9 publications

References 7 publications

PLC Cybersecurity Test Platform Establishment and Cyberattack Practice

PLC Cybersecurity Test Platform Establishment and Cyberattack Practice

Security of Programmable Logic Controllers and Related Systems: Today and Tomorrow

Domain‐specific translation tool from structured text to C source code with code readability enhancement in programmable logic controllers

Contact Info

Product

Resources

About