Abstract:Industrial control systems (ICSs) are widely used in critical infrastructures, making them popular targets for attacks to cause catastrophic physical damage. As one of the most critical components in ICSs, the programmable logic controller (PLC) controls the actuators directly. A PLC executing a malicious program can cause significant property loss or even casualties. The number of attacks targeted at PLCs has increased noticeably over the last few years, exposing the vulnerability of the PLC and the importance of PLC protection. Unfortunately, PLCs cannot be protected by traditional intrusion detection systems or antivirus software. Thus, an effective method for PLC protection is yet to be designed. Motivated by these concerns, we propose a non-invasive powerbased anomaly detection scheme for PLCs. The basic idea is to detect malicious software execution in a PLC through analyzing its power consumption, which is measured by inserting a shunt resistor in series with the CPU in a PLC while it is executing instructions. To analyze the power measurements, we extract a discriminative feature set from the power trace, and then train a long short-term memory (LSTM) neural network with the features of normal samples to predict the next time step of a normal sample. Finally, an abnormal sample is identified through comparing the predicted sample and the actual sample. The advantages of our method are that it requires no software modification on the original system and is able to detect unknown attacks effectively. The method is evaluated on a lab testbed, and for a trojan attack whose difference from the normal program is around 0.63%, the detection accuracy reaches 99.83%.

Control flow analysis method of PLC program

Synthesis of logical controllers and discrete-event systems supervisory control theory

Reverse Engineering Physical Semantics of PLC Program Variables Using Control Invariants.

Anomoly Detection for PLC Based on Magnetic Side Channel

From Control Application to Control Logic: PLC Decompile Framework for Industrial Control System

Symbolic Analysis of Programmable Logic Controllers

New Strategies for Reliability Analysis of Programmable Logic Controllers

Static slicing for PLC program with ladder transformation

NIPAD: a Non-Invasive Power-Based Anomaly Detection Scheme for Programmable Logic Controllers

Control Flow Analysis Based on Intermediate Representation of Executable Code

Application of PLC Controller Link

Detection and Analysis Technique for Manipulation Attacks on PLC Control Logic

PLC in power system automation engineering analysis

The Security Assessment on Programmable Logic Controller Based on Attack Tree Model and FAHP

Programmable Logic Controllers Past Linear Temporal Logic for Monitoring Applications in Industrial Control Systems

Toward Reliable Programmable Logic Controller Function Block Diagrams

Symbolic execution of programmable logic controller code

A Survey on Programmable Logic Controller Vulnerabilities, Attacks, Detections, and Forensics

Domain-Driven Probabilistic Analysis Of Programmable Logic Controllers

A New Approach for PLC Ladder Diagram Design.

Formal Modeling and Synthesis of Programmable Logic Controllers