A study on command block collection and restoration techniques through detection of project file manipulation on engineering workstation of industrial control system
- Authors
- Shin, Jiho; Choi, Hyunpyo; Seo, Jung Taek
- Issue Date
- Mar-2022
- Publisher
- ELSEVIER SCI LTD
- Keywords
- Industrial control system; Digital forensic; Engineering workstation; Siemens TIA Portal; Project file
- Citation
- FORENSIC SCIENCE INTERNATIONAL-DIGITAL INVESTIGATION, v.40
- Journal Title
- FORENSIC SCIENCE INTERNATIONAL-DIGITAL INVESTIGATION
- Volume
- 40
- URI
- https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/84140
- DOI
- 10.1016/j.fsidi.2022.301354
- ISSN
- 2666-2817
- Abstract
- Major control systems such as ICS/SCADA are currently being used in the key infrastructures of our society, notably in the energy, transportation, and healthcare sectors. The PLC, which is located in the lowest layer of the control system, is directly connected to diverse field devices including sensors and actuators. In the event of a cyber-attack on the PLC, the potential ripple effects, such as a collapse of the national infrastructure, could be very large, making a high level of cyber safety essential. Therefore, it is necessary to apply digital forensic technology to the PLC to respond to cyber-attacks against the control system. However, conventional methods of directly investigating the PLC, such as network and memory forensics, have practical difficulties as they could compromise the availability of the control system. As such, this paper proposes a method of detecting and restoring logic data when the logic data are changed as a result of a cyber-attack, by using the digital forensic technology developed for the Engineering Workstation (EWS), which has been used to develop, manage and set the control system program logic.(c) 2022 The Authors. Published by Elsevier Ltd. This is an open access article under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/).
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - IT융합대학 > 컴퓨터공학과 > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/84140)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.