PLCStudio: Simulation based PLC code verification

Park, Sang C.; Park, Chang Mok; Wang, Gi-Nam; Kwak, Jongeun; Yeo, Sungjoo

doi:10.1109/wsc.2008.4736071

Cited by 19 publications

(9 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Na tej podstawie możliwe jest udokumentowanie i zautomatyzowanie procesu walidacji dużych maszyn zespolonych. W pracach [17,18] logikę sterowania modelem zakładu. Artykuł opisuje metodę konstrukcji modelu zakładu opartą na formalizmie DEVS (ang.…”

Section: Automatyczna Walidacja Systemu Sterowania Bezpieczeństwemunclassified

Hidden Security Breaches in Automatic Control of Technological Processes

Szuster¹,

Kozioł²

2021

PAR

View full text Add to dashboard Cite

The progressing automation and robotization in the industrial plants as well as the increasing complexity of the control systems of integrated machines make it necessary to constantly improve the functional safety of machines through the correct validation of safety systems. Despite the validation process carried out, the potential software errors may reveal during the usage of the machine as hidden security breaches. The article presents examples of security breaches of real machine tools and attempts to implement solutions of automated mechanisms for detecting security problems. Another aspect of the article is the new approach for detecting hidden security breaches. Using the „digital twin” model of the machine, a program that generates a sequence of events for testing control systems, and the use of a virtual reality (visual verification of the safety programs), it is possible to maximize the functional safety functions of the machine.

show abstract

Section: Automatyczna Walidacja Systemu Sterowania Bezpieczeństwemunclassified

Hidden Security Breaches in Automatic Control of Technological Processes

Szuster¹,

Kozioł²

2021

PAR

View full text Add to dashboard Cite

show abstract

“…As for simulation, [21] proposed a PLC programming environment architecture, which realized the visual verification of PLC programs. Ref.…”

Section: Related Workmentioning

confidence: 99%

A User-Friendly Verification Approach for IEC 61131-3 PLC Programs

et al. 2020

View full text Add to dashboard Cite

Programmable logic controllers (PLCs) are special embedded computers that are widely used in industrial control systems. To ensure the safety of industrial control systems, it is necessary to verify the correctness of PLCs. Formal verification is considered to be an effective method to verify whether a PLC program conforms to its specifications, but the expertise requirements and the complexity make it hard to be mastered and widely applied. In this paper, we present a specification-mining-based verification approach for IEC 61131-3 PLC programs. It only requires users to review specifications mined from the program behaviors instead of model checking for specified specifications, which can greatly improve the efficiency of safety verification and is much easier for control system engineers to use. Moreover, we implement a proof-of-concept tool named PLCInspector that supports directly mining LTL specifications and data invariants from PLC programs. Two examples and one real-life case study are presented to illustrate its practicability and efficiency. In addition, a comparison with the existing verification approaches for PLC programs is discussed.

show abstract

“…Many prior efforts [24], [28], [30], [31], [42], [44], [57], [58], [61], [63], [65] have been made to statically verify logic code using model checkers [15], [21]. Further efforts have also been made to conduct runtime verification in an online [39], [45] or offline manner [35], [62]. More recently, symbolic execution [43], [54] has been enabled on PLC code.…”

Section: Related Workmentioning

confidence: 99%

“…To address these limitations, prior work [35], [39], [45], [62] has explored the usage of dynamic simulations of runtime behaviors to detect PLC safety violations. In addition, recent work [43], [54] has enabled symbolic execution on PLC code.…”

Section: Introductionmentioning

confidence: 99%

Towards Automated Safety Vetting of PLC Code in Real-World Plants

Zhang

Chen

Kao

et al. 2019

2019 IEEE Symposium on Security and Privacy (SP)

View full text Add to dashboard Cite

Safety violations in programmable logic controllers (PLCs), caused either by faults or attacks, have recently garnered significant attention. However, prior efforts at PLC code vetting suffer from many drawbacks. Static analyses and verification cause significant false positives and cannot reveal specific runtime contexts. Dynamic analyses and symbolic execution, on the other hand, fail due to their inability to handle real-world PLC programs that are event-driven and timing sensitive. In this paper, we propose VETPLC, a temporal context-aware, program analysisbased approach to produce timed event sequences that can be used for automatic safety vetting. To this end, we (a) perform static program analysis to create timed event causality graphs in order to understand causal relations among events in PLC code and (b) mine temporal invariants from data traces collected in Industrial Control System (ICS) testbeds to quantitatively gauge temporal dependencies that are constrained by machine operations. Our VETPLC prototype has been implemented in 15K lines of code. We evaluate it on 10 real-world scenarios from two different ICS settings. Our experiments show that VETPLC outperforms state-of-the-art techniques and can generate event sequences that can be used to automatically detect hidden safety violations.

show abstract

PLCStudio: Simulation based PLC code verification

Cited by 19 publications

References 10 publications

Hidden Security Breaches in Automatic Control of Technological Processes

Hidden Security Breaches in Automatic Control of Technological Processes

A User-Friendly Verification Approach for IEC 61131-3 PLC Programs

Towards Automated Safety Vetting of PLC Code in Real-World Plants

Contact Info

Product

Resources

About