Abstract:Industrial control systems (ICSs) are widely used in critical infrastructures, making them popular targets for attacks to cause catastrophic physical damage. As one of the most critical components in ICSs, the programmable logic controller (PLC) controls the actuators directly. A PLC executing a malicious program can cause significant property loss or even casualties. The number of attacks targeted at PLCs has increased noticeably over the last few years, exposing the vulnerability of the PLC and the importance of PLC protection. Unfortunately, PLCs cannot be protected by traditional intrusion detection systems or antivirus software. Thus, an effective method for PLC protection is yet to be designed. Motivated by these concerns, we propose a non-invasive powerbased anomaly detection scheme for PLCs. The basic idea is to detect malicious software execution in a PLC through analyzing its power consumption, which is measured by inserting a shunt resistor in series with the CPU in a PLC while it is executing instructions. To analyze the power measurements, we extract a discriminative feature set from the power trace, and then train a long short-term memory (LSTM) neural network with the features of normal samples to predict the next time step of a normal sample. Finally, an abnormal sample is identified through comparing the predicted sample and the actual sample. The advantages of our method are that it requires no software modification on the original system and is able to detect unknown attacks effectively. The method is evaluated on a lab testbed, and for a trojan attack whose difference from the normal program is around 0.63%, the detection accuracy reaches 99.83%.

The Security Assessment on Programmable Logic Controller Based on Attack Tree Model and FAHP

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Reverse Engineering Physical Semantics of PLC Program Variables Using Control Invariants.

Fusion Assessment of Safety and Security for Intelligent Industrial Unmanned Systems

State Machine Based Malicious Packet Attack Detection and Security Situation Assessment

PLC access control: a security analysis

Designing Actively Secure, Highly Available Industrial Automation Applications

Quantitative Risk Assessment of Threats on SCADA Systems Using Attack Countermeasure Tree

Intrusion Detection Model of SCADA Using Graphical Features

A Survey on Programmable Logic Controller Vulnerabilities, Attacks, Detections, and Forensics

Towards Comprehensively Understanding the Run-time Security of Programmable Logic Controllers: A 3-year Empirical Study

NIPAD: a Non-Invasive Power-Based Anomaly Detection Scheme for Programmable Logic Controllers

SoK: Security of Programmable Logic Controllers

Empirical Study of PLC Authentication Protocols in Industrial Control Systems

SoK: Attacks on Industrial Control Logic and Formal Verification-Based Defenses

A cyber-physical model for SCADA system and its intrusion detection

HRPDF: A Software-Based Heterogeneous Redundant Proactive Defense Framework for Programmable Logic Controller.

Fuzzing proprietary protocols of programmable controllers to find vulnerabilities that affect physical control

PLC Cybersecurity Test Platform Establishment and Cyberattack Practice

AsIf: Asset Interface Analysis of Industrial Automation Devices

Walking Under the Ladder Logic: PLC-VBS, a PLC Control Logic Vulnerability Discovery Tool