Ghost in the PLC vs GhostBuster: on the feasibility of detecting pin control attack in Programmable Logic Controllers

A. Abbasi, Andrea Genuise

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureVoorwoord/editorialAcademic

453 Downloads (Pure)


Programmable Logic Controllers (PLCs) are a family of embedded devices used for physical process control. Similar to other embedded devices, PLCs are vulnerable to cyber attacks. Because they are used to control the physical processes of critical infrastructures, compromised PLCs constitute a significant security and safety risk. Previously we introduced specific attack against PLCs which can stealthily manipulate the physical process it controls by tampering with the device I/O at a low level. We implemented different variants of the attack in the form of a rootkit and a user-space malicious code over a candidate PLC. We then move forward with a tailored defense which specifically detect modification of PLCs I/O to detect our attack.
Originele taal-2Engels
TitelGhost in the PLC vs GhostBuster
SubtitelOn the Feasibility of Detecting Pin Control Attack in Programmable Logic Controllers
Aantal pagina's72
StatusNiet gepubliceerd - 1 mei 2017


Duik in de onderzoeksthema's van 'Ghost in the PLC vs GhostBuster: on the feasibility of detecting pin control attack in Programmable Logic Controllers'. Samen vormen ze een unieke vingerafdruk.
  • Stealth low-level manipulation of programmable logic controllers I/O by pin control exploitation

    Abbasi, A., Hashemi, M., Zambon, E. & Etalle, S., 10 okt. 2016, Critical Information Infrastructures Security - 11th International Conference, CRITIS 2016, Revised Selected Papers: 11th International Conference, CRITIS 2016, Paris, France, October 10–12, 2016, Revised Selected Papers. Havarneanu, G., Setola, R., Nassopoulos, H. & Wolthusen, S. (redactie). Dordrecht: Springer, blz. 1-12 12 blz. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 10242 LNCS).

    Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review

    6 Citaten (Scopus)

Citeer dit