Abstract:Internet of Things (IoT) technologies enable development of reconfigurable manufacturing systems—a new generation of modularized industrial equipment suitable for highly customized manufacturing. Sequential control in these systems is largely based on discrete events, whereas their formal execution semantics is specified as control interpreted Petri nets (CIPN). Despite industry-wide use of programming languages based on the CIPN formalism, formal verification of such control applications in the presence of adversarial activity is not supported. Consequently, in this article, we introduce security-aware modeling and verification techniques for CIPN-based sequential control applications. Specifically, we show how CIPN models of networked industrial IoT controllers can be transformed into time Petri net (TPN)-based models and composed with plant and security-aware channel models in order to enable system-level verification of safety properties in the presence of network-based attacks. Additionally, we introduce realistic channel-specific attack models that capture adversarial behavior using nondeterminism. Moreover, we show how verification results can be utilized to introduce security patches and facilitate design of attack detectors that improve system resiliency and enable satisfaction of critical safety properties. Finally, we evaluate our framework on an industrial case study. Note to Practitioners—Our main goal is to provide formal security guarantees for distributed sequential controllers. Specifically, we target smart automation controllers geared toward Industrial IoT applications that are typically programed in C/C++ and are running applications originally designed in, for example, GRAFCET (IEC 60848)/SFC (IEC 61131-3) automation programming languages. Since existing tools for the design of distributed automation do not support system-level verification of relevant safety properties- we show how security-aware transceiver and communication models can be developed and composed with distributed controller models. Then, we show how existing tools for verification of time Petri nets can be used to verify relevant properties including safety and liveness of the distributed automation system in the presence of network-based attacks. To provide an end-to-end analysis as well as security patching, results of our analysis can be used to deploy suitable firmware updates during the stage when executable code for target controllers (e.g., in C/C++) is generated based on GRAFCET/SFC control models. We also show that security guarantees can be improved as the relevant safety/liveness properties can be verified after corresponding security patches are deployed. Finally, we show applicability of our framework on a realistic distributed pneumatic manipulator.

Towards the formal verification of security properties of a Network-on-Chip router

SeVNoC: Security Validation of System-on-Chip Designs With NoC Fabrics

Protocols to Code: Formal Verification of a Next-Generation Internet Router

Probabilistic Verification for Reliable Network-on-Chip System Design

From Wireless Sensor Networks to Wireless Body Area Networks: Formal Modeling and Verification on Security Using PAT.

Network-on-Chip Firewall: Countering Defective and Malicious System-on-Chip Hardware

Verifying Isolation Properties in the Presence of Middleboxes

Practical and Scalable Security Verification of Secure Architectures

Verifying Non-friendly Formal Verification Designs: Can We Start Earlier?

Model Checking Techniques for Verification of an Encryption Scheme for Wireless Sensor Networks

Security Measures Against a Rogue Network-on-Chip

Finding Security Vulnerabilities in Network Protocol Implementations

Security Assurance for System-on-Chip Designs With Untrusted IPs

Electronic, Wireless, and Photonic Network-on-Chip Security: Challenges and Countermeasures

Verification of Interdomain Routing System Based on Formal Methods

NoCFuzzer: Automating NoC Verification in UVM

A NoC Emulation/Verification Framework

Formal Modelling and Verification of Software Defined Network

A Review of Automated Formal Verification of Ad Hoc Routing Protocols for Wireless Sensor Networks

CSEVP: A Collaborative, Secure, and Efficient Content Validation Protection Framework for Information Centric Networking

Security Analysis for Distributed IoT-Based Industrial Automation