Cyberattacks targeting industrial control systems(ICS)are becoming more sophisticated and advanced than in the past.A programmable logic controller(PLC),a core component of ICS,controls and monitors sensors and actuat...Cyberattacks targeting industrial control systems(ICS)are becoming more sophisticated and advanced than in the past.A programmable logic controller(PLC),a core component of ICS,controls and monitors sensors and actuators in the field.However,PLC has memory attack threats such as program injection and manipulation,which has long been a major target for attackers,and it is important to detect these attacks for ICS security.To detect PLC memory attacks,a security system is required to acquire and monitor PLC memory directly.In addition,the performance impact of the security system on the PLC makes it difficult to apply to the ICS.To address these challenges,this paper proposes a system to detect PLC memory attacks by continuously acquiring and monitoring PLC memory.The proposed system detects PLC memory attacks by acquiring the program blocks and block information directly from the same layer as the PLC and then comparing them in bytes with previous data.Experiments with Siemens S7-300 and S7-400 PLC were conducted to evaluate the PLC memory detection performance and performance impact on PLC.The experimental results demonstrate that the proposed system detects all malicious organization block(OB)injection and data block(DB)manipulation,and the increment of PLC cycle time,the impact on PLC performance,was less than 1 ms.The proposed system detects PLC memory attacks with a simpler detection method than earlier studies.Furthermore,the proposed system can be applied to ICS with a small performance impact on PLC.展开更多
燃煤锅炉是一种重要的能量转换设备,对其燃烧过程的稳定控制是燃料充分燃烧的必要条件。为提高锅炉系统的环保性,采用工控机(Industrial Personal Computer,IPC)与可编程逻辑控制器(Programmable Logic Controller,PLC)相结合的方式,设...燃煤锅炉是一种重要的能量转换设备,对其燃烧过程的稳定控制是燃料充分燃烧的必要条件。为提高锅炉系统的环保性,采用工控机(Industrial Personal Computer,IPC)与可编程逻辑控制器(Programmable Logic Controller,PLC)相结合的方式,设计了燃煤锅炉的分布式控制系统。以给煤量控制为例,阐述了控制方法的设计过程。依据燃煤锅炉的工艺过程,采用WinCC组态软件设计监控系统,以实现锅炉的远程交互控制,提高锅炉运行的安全性和稳定性。展开更多
基金supported by the Korea WESTERN POWER(KOWEPO)(2022-Commissioned Research-11,Development of Cyberattack Detection Technology for New and Renewable Energy Control System Using AI(Artificial Intelligence),50%)the Institute of Information&Communications Technology Planning&Evaluation(IITP)grant funded by the Korea government(MSIT)(No.2021-0-01806,Development of Security by Design and Security Management Technology in Smart Factory,40%)the Gachon University Research Fund of 2023(GCU-202110280001,10%).
文摘Cyberattacks targeting industrial control systems(ICS)are becoming more sophisticated and advanced than in the past.A programmable logic controller(PLC),a core component of ICS,controls and monitors sensors and actuators in the field.However,PLC has memory attack threats such as program injection and manipulation,which has long been a major target for attackers,and it is important to detect these attacks for ICS security.To detect PLC memory attacks,a security system is required to acquire and monitor PLC memory directly.In addition,the performance impact of the security system on the PLC makes it difficult to apply to the ICS.To address these challenges,this paper proposes a system to detect PLC memory attacks by continuously acquiring and monitoring PLC memory.The proposed system detects PLC memory attacks by acquiring the program blocks and block information directly from the same layer as the PLC and then comparing them in bytes with previous data.Experiments with Siemens S7-300 and S7-400 PLC were conducted to evaluate the PLC memory detection performance and performance impact on PLC.The experimental results demonstrate that the proposed system detects all malicious organization block(OB)injection and data block(DB)manipulation,and the increment of PLC cycle time,the impact on PLC performance,was less than 1 ms.The proposed system detects PLC memory attacks with a simpler detection method than earlier studies.Furthermore,the proposed system can be applied to ICS with a small performance impact on PLC.
文摘燃煤锅炉是一种重要的能量转换设备,对其燃烧过程的稳定控制是燃料充分燃烧的必要条件。为提高锅炉系统的环保性,采用工控机(Industrial Personal Computer,IPC)与可编程逻辑控制器(Programmable Logic Controller,PLC)相结合的方式,设计了燃煤锅炉的分布式控制系统。以给煤量控制为例,阐述了控制方法的设计过程。依据燃煤锅炉的工艺过程,采用WinCC组态软件设计监控系统,以实现锅炉的远程交互控制,提高锅炉运行的安全性和稳定性。
