Abstract:With the advent of Industry 4.0 , industrial facilities and critical infrastructures are transforming into an ecosystem of heterogeneous physical and cyber components, such as programmable logic controllers , increasingly interconnected and therefore exposed to cyber-physical attacks , i.e., security breaches in cyberspace that may adversely affect the physical processes underlying industrial control systems . In this article, we propose a formal approach based on runtime enforcement to ensure specification compliance in networks of controllers, possibly compromised by colluding malware that may locally tamper with actuator commands, sensor readings, and inter-controller communications. Our approach relies on an ad-hoc sub-class of Ligatti et al.’s edit automata to enforce controllers represented in Hennessy and Regan’s Timed Process Language . We define a synthesis algorithm that, given an alphabet P of observable actions and a timed correctness property e , returns a monitor that enforces the property e during the execution of any (potentially corrupted) controller with alphabet P, and complying with the property e . Our monitors do mitigation by correcting and suppressing incorrect actions of corrupted controllers and by generating actions in full autonomy when the controller under scrutiny is not able to do so in a correct manner. Besides classical requirements, such as transparency and soundness , the proposed enforcement enjoys deadlock- and diverge-freedom of monitored controllers, together with scalability when dealing with networks of controllers. Finally, we test the proposed enforcement mechanism on a non-trivial case study, taken from the context of industrial water treatment systems, in which the controllers are injected with different malware with different malicious goals.

A process calculus approach to correctness enforcement of PLCs (full version)

Runtime Enforcement of Programmable Logic Controllers

Synthesis of logical controllers and discrete-event systems supervisory control theory

Programmable Logic Controllers Past Linear Temporal Logic for Monitoring Applications in Industrial Control Systems

Industrial Control Systems Security via Runtime Enforcement

A Refinement-Based Validation Method for Programmable Logic Controllers

Combinational Model-Checking Of Plc Programs' Verification Based On Instructions

Formal Modeling and Synthesis of Programmable Logic Controllers

PLCverif: Status of a Formal Verification Tool for Programmable Logic Controller

On Formal Reasoning on the Semantics of PLC using Coq

Translation-Based Model Checking for PLC Programs

PLC Modeling and Checking Based on Formal Method.

Formal Verification of Safety PLC Based Control Software

Automatic verification of event-driven control programs: A case study

HyPLC: Hybrid Programmable Logic Controller Program Translation for Verification

Formal Specification and Code Generation of Programable Logic Controllers

Semantic characterization of programmable logic controller programs.

Verifying Programmable Logic Controllers with Abstraction

PCaaD: Towards Automated Determination and Exploitation of Industrial Processes

Formal Component-Based Modeling and Synthesis for PLC Systems

PLC Programs' Checking Method and Strategy Based on Module State Transfer.