Programmable Logic Controller Block Monitoring System for Memory Attack Defense in Industrial Control Systems
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Lee, Mingyu | - |
dc.contributor.author | Shin, Jiho | - |
dc.contributor.author | Seo, Jung Taek | - |
dc.date.accessioned | 2024-01-11T08:30:19Z | - |
dc.date.available | 2024-01-11T08:30:19Z | - |
dc.date.issued | 2023-11 | - |
dc.identifier.issn | 1546-2218 | - |
dc.identifier.issn | 1546-2226 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/90032 | - |
dc.description.abstract | Cyberattacks targeting industrial control systems (ICS) are becoming more sophisticated and advanced than in the past. A programmable logic controller (PLC), a core component of ICS, controls and monitors sensors and actuators in the field. However, PLC has memory attack threats such as program injection and manipulation, which has long been a major target for attackers, and it is important to detect these attacks for ICS security. To detect PLC memory attacks, a security system is required to acquire and monitor PLC memory directly. In addition, the performance impact of the security system on the PLC makes it difficult to apply to the ICS. To address these challenges, this paper proposes a system to detect PLC memory attacks by continuously acquiring and monitoring PLC memory. The proposed system detects PLC memory attacks by acquiring the program blocks and block information directly from the same layer as the PLC and then comparing them in bytes with previous data. Experiments with Siemens S7-300 and S7-400 PLC were conducted to evaluate the PLC memory detection performance and performance impact on PLC. The experimental results demonstrate that the proposed system detects all malicious organization block (OB) injection and data block (DB) manipulation, and the increment of PLC cycle time, the impact on PLC performance, was less than 1 ms. The proposed system detects PLC memory attacks with a simpler detection method than earlier studies. Furthermore, the proposed system can be applied to ICS with a small performance impact on PLC. | - |
dc.format.extent | 16 | - |
dc.language | 영어 | - |
dc.language.iso | ENG | - |
dc.publisher | TECH SCIENCE PRESS | - |
dc.title | Programmable Logic Controller Block Monitoring System for Memory Attack Defense in Industrial Control Systems | - |
dc.type | Article | - |
dc.identifier.wosid | 001126959900004 | - |
dc.identifier.doi | 10.32604/cmc.2023.041774 | - |
dc.identifier.bibliographicCitation | CMC-COMPUTERS MATERIALS & CONTINUA, v.77, no.2, pp 2427 - 2442 | - |
dc.description.isOpenAccess | Y | - |
dc.identifier.scopusid | 2-s2.0-85179121780 | - |
dc.citation.endPage | 2442 | - |
dc.citation.startPage | 2427 | - |
dc.citation.title | CMC-COMPUTERS MATERIALS & CONTINUA | - |
dc.citation.volume | 77 | - |
dc.citation.number | 2 | - |
dc.type.docType | Article | - |
dc.publisher.location | 미국 | - |
dc.subject.keywordAuthor | Programmable logic controller | - |
dc.subject.keywordAuthor | industrial control system | - |
dc.subject.keywordAuthor | attack detection | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Materials Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Materials Science, Multidisciplinary | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
1342, Seongnam-daero, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea(13120)031-750-5114
COPYRIGHT 2020 Gachon University All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.