PLC Logic-Based Cybersecurity Risks Identification for ICS - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2023

PLC Logic-Based Cybersecurity Risks Identification for ICS

Identification des risques de cybersécurité des SCI basée sur la logique des API

Résumé

In recent years, Informational Technologies (IT) was massively deployed into Industrial Control Systems (ICS) mainly for its economic benefits. However, this new paradigm, converging IT and Operational Technologies (OT), brings new challenges that companies need to face. Historically, ICS had to cope with safety requirements which ensure the protection of people, environment, and assets. Now, ICS must deal with additional threats, coming from cyberattacks, in order to maintain safety. For that purpose, it becomes essential to develop new cybersecurity technologies and methodologies that allow to assess the safety of ICS against cyberattacks. In this paper, we propose a new methodology, based on Programmable Logic Controller (PLC) logic in order to identify cyberattacks that impacts the ICS safety. Our methodology transforms a PLC logic into a finite-state machine that represents the PLC behavior. Then, using this automaton, we identify which modifications in states of sensors and actuators leads to compromising the safety. Finally, we build attack scenarios from these events and the network vulnerabilities. We apply our methodology on a simple example, yet challenging to analyze by hand, and we show how we manage to scale up on a classical example from the control systems domain: the Tennessee Eastman chemical process.
Fichier principal
Vignette du fichier
ares2023-119_fv.pdf (1.02 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04165414 , version 1 (19-07-2023)

Licence

Identifiants

Citer

Mike Da Silva, Maxime Puys, Pierre-Henri Thevenon, Stéphane Mocanu. PLC Logic-Based Cybersecurity Risks Identification for ICS. ARES 2023 - 18th International Conference on Availability, Reliability and Security, Aug 2023, Benevento, Italy. pp.1-10, ⟨10.1145/3600160.3605067⟩. ⟨hal-04165414⟩
148 Consultations
183 Téléchargements

Altmetric

Partager

More