Detection and Blocking Method against DLL Injection Attack Using PEB-LDR of ICS EWS in Smart IoT Environmentsopen access
- Authors
- Kim, Junwon; Shin, Jiho; Seo, Jung Taek
- Issue Date
- Jul-2022
- Publisher
- LIBRARY & INFORMATION CENTER, NAT DONG HWA UNIV
- Keywords
- Industrial Control System (ICS); Internet of Things (IoT); Engineering Workstation (EWS); Process Environment Block (PEB); Dynamic Link Library (DLL); Injection
- Citation
- JOURNAL OF INTERNET TECHNOLOGY, v.23, no.4, pp.875 - 888
- Journal Title
- JOURNAL OF INTERNET TECHNOLOGY
- Volume
- 23
- Number
- 4
- Start Page
- 875
- End Page
- 888
- URI
- https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/86123
- DOI
- 10.53106/160792642022072304022
- ISSN
- 1607-9264
- Abstract
- Modern Industrial Control System (ICS) can provide vast functions as the introduction of IT technology is established along with the introduction of the IoT environment. Engineering Workstation (EWS) used by ICS is widely used to efficiently manage and control industrial devices including smart IoT devices. However, the DLL injection attack in ICS is not high in difficulty compared to the risk, but it can cause fatal malfunction. If an attack is carried out targeting the EWS, it may cause erroneous operation in many control devices, including IoT devices, cause fatal accidents throughout the Supervisory Control and Data Acquisition (SCADA) system. In this paper, we present a method to detect DLL injection attacks by specializing in EWS used in ICS in IoT environment and purpose a method to detect data changes due to DLL injection attacks by analyzing and utilizing PEB-LDR data. Also, we purpose a method to detect and block execution when a malicious DLL is suspected to be loaded by DLL injection.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - IT융합대학 > 컴퓨터공학과 > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/86123)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.