Programmable Logic Controller Block Monitoring System for Memory Attack Defense in Industrial Control Systems

Cyberattacks targeting industrial control systems(ICS)are becoming more sophisticated and advanced than in the past.A programmable logic controller(PLC),a core component of ICS,controls and monitors sensors and actuators in the field.However,PLC has memory attack threats such as program injection and manipulation,which has long been a major target for attackers,and it is important to detect these attacks for ICS security.To detect PLC memory attacks,a security system is required to acquire and monitor PLC memory directly.In addition,the performance impact of the security system on the PLC makes it difficult to apply to the ICS.To address these challenges,this paper proposes a system to detect PLC memory attacks by continuously acquiring and monitoring PLC memory.The proposed system detects PLC memory attacks by acquiring the program blocks and block information directly from the same layer as the PLC and then comparing them in bytes with previous data.Experiments with Siemens S7-300 and S7-400 PLC were conducted to evaluate the PLC memory detection performance and performance impact on PLC.The experimental results demonstrate that the proposed system detects all malicious organization block(OB)injection and data block(DB)manipulation,and the increment of PLC cycle time,the impact on PLC performance,was less than 1 ms.The proposed system detects PLC memory attacks with a simpler detection method than earlier studies.Furthermore,the proposed system can be applied to ICS with a small performance impact on PLC.

Enhancing Programmable Logic Controller Teaching in Vocational Colleges:Strategies for Deeper Understanding and Practical Application

This paper addresses the problems faced in programmable logic controller(PLC)teaching in vocational colleges and proposes countermeasures to overcome these challenges.The study emphasizes the need for a deeper understanding of fundamental concepts and the integration of practical application in PLC education.It suggests involving students in teacher-led projects to enhance their programming skills and problem-solving skills.Additionally,the paper highlights the importance of interactive learning and collaborative discussions to foster student engagement.Furthermore,it emphasizes the cultivation of innovation consciousness through participation in innovation competitions and projects.The implementation of these strategies has shown positive results in improving learning outcomes and preparing students for careers in automation and control.This research contributes to the development of effective teaching approaches in PLC education in vocational colleges.

NIPAD： a non-invasive power-based anomaly detection scheme for programmable logic controllers

Industrial control systems （ICSs） are widely used in critical infrastructures, making them popular targets for attacks to cause catastrophic physical damage. As one of the most critical components in ICSs, the programmable logic controller （PLC） controls the actuators directly. A PLC executing a malicious program can cause significant property loss or even casualties. The number of attacks targeted at PLCs has increased noticeably over the last few years, exposing the vulnerability of the PLC and the importance of PLC protection. Unfortunately, PLCs cannot be protected by traditional intrusion detection systems or antivirus software. Thus, an effective method for PLC protection is yet to be designed. Motivated by these concerns, we propose a non-invasive power- based anomaly detection scheme for PLCs. The basic idea is to detect malicious software execution in a PLC through analyzing its power consumption, which is measured by inserting a shunt resistor in series with the CPU in a PLC while it is executing instructions. To analyze the power measurements, we extract a discriminative feature set from the power trace, and then train a long short-term memory （LSTM） neural network with the features of normal samples to predict the next time step of a normal sample. Finally, an abnormal sample is identified through comparing the predicted sample and the actual sample. The advantages of our method are that it requires no software modification on the original system and is able to detect unknown attacks effectively. The method is evaluated on a lab testbed, and for a trojan attack whose difference from the normal program is around 0.63%, the detection accuracy reaches 99.83%.

HRPDF: A Software-Based Heterogeneous Redundant Proactive Defense Framework for Programmable Logic Controller

Programmable logic controllers(PLCs)play a critical role in many industrial control systems,yet face increasingly serious cyber threats.In this paper,we propose a novel PLC-compatible software-based defense mechanism,called Heterogeneous Redundant Proactive Defense Framework(HRPDF).We propose a heterogeneous PLC architecture in HRPDF,including multiple heterogeneous,equivalent,and synchronous runtimes,which can thwart multiple types of attacks against PLC without the need of external devices.To ensure the availability of PLC,we also design an inter-process communication algorithm that minimizes the overhead of HRPDF.We implement a prototype system of HRPDF and test it in a real-world PLC and an OpenPLC-based device,respectively.The results show that HRPDF can defend against multiple types of attacks with 10.22%additional CPU and 5.56%additional memory overhead,and about 0.6 ms additional time overhead.

Synthesis of Nonlinear Control of Switching Topologies of Buck-Boost Converter Using Fuzzy Logic on Field Programmable Gate Array (FPGA)

An intelligent fuzzy logic inference pipeline for the control of a dc-dc buck-boost converter was designed and built using a semi-custom VLSI chip. The fuzzy linguistics describing the switching topologies of the converter was mapped into a look-up table that was synthesized into a set of Boolean equations. A VLSI chip–a field programmable gate array (FPGA) was used to implement the Boolean equations. Features include the size of RAM chip independent of number of rules in the knowledge base, on-chip fuzzification and defuzzification, faster response with speeds over giga fuzzy logic inferences per sec (FLIPS), and an inexpensive VLSI chip. The key application areas are: 1) on-chip integrated controllers;and 2) on-chip co-integration for entire system of sensors, circuits, controllers, and detectors for building complete instrument systems.

Digital signal acquisition system for complex nuclear reaction experiments

A digital data-acquisition system based on XIA LLC products was used in a complex nuclear reaction experiment using radioactive ion beams.A flexible trigger system based on a field-programmable gate array(FPGA)parametrization was developed to adapt to different experimental sizes.A user-friendly interface was implemented,which allows converting script language expressions into FPGA internal control parameters.The proposed digital system can be combined with a conventional analog data acquisition system to provide more flexibility.The performance of the combined system was veri-fied using experimental data.

Design of PLC control system of RTG spreader in Qingdao Port Container Terminal

The control method of rubber tyre gantry （RTG） spreader in Qingdao Port Container Terminal is logic board control,which has many shortcomings such as expensive spare parts and high faults.This paper designs a new control system using programmable logic controller （PLC） centralized control to replace the original logic board control.The new system mainly contains complete ELME spreader control scheme design,hardware selection and PLC control program development.Its field application shows that the system has characteristics of high efficiency,low running cost,easy maintenance.

Measurement and control system for servo pressure pulse testing equipment

Servo pressure pulse testing equipment uses servo-hydraulic technology to build the model of hydraulic system. By improving measurement and control system, the equipment accomplishes signal acquisition, data processing and process con- trol. LabVIEW and programmable logic controller （PLC） are used to carry out the hardware configuration and software de- velopment. The system can communicate between LabVIEW and PLC by virtual instrumentation software architecture （VI- SA） and run automatically in accordance with setting commands. Therefore, accuracy and performance of the equipment are improved.

Research on rapid development platform of PLC control system

In the field of industrial process control,a fast-development platform for programmable logic controller(PLC)systems is designed in order to solve two main problems of rapid development of PLC control system and programmability of controlling software.In the aspect of design,the platform is composed of hardware controlling and software monitoring and is taking industrial computer as the core.Under the Windows environment,the platform establishes the control instruction set,develops the configuration function and visual programming function of the monitoring software and it integrates PLC controller based on Visual Basic software.In order to achieve the function of data monitoring,it has realized the serial communication between computer and PLC by using RS-485 and RS-232 serial ports line communication.The platform designs the intelligent instruction scheduling strategy by studying the encoding and decoding rules of the communication instruction set.It proposes a method for rapidly developing control programs by adopting the expert control mode,which enables clients to develop and modify programs conveniently by importing instructions in a non-coded manner.After experimental testing,the platform is proved successful achieving both the rapid development of PLC control system and the rapid modification of monitoring software.

The Designed Operation of the Machine Control System on HL-2A Tokamak

The Ethernet and field-bus communications are used in the machine control system （MCS） of HL-2A. The control net, with a programmable logic controller （PLC） as its logic control master, an engineering control management station as its net server, and a timing control PC connected to a number of terminals, flexibly and freely transfers information among the nodes on it with the Ethernet transmission techniques. The PLC masters the field bus, which carries small pieces of information between PLC and the field sites reliably and quickly. The control net is connected into the data net, where Internet access and sharing of more experimental data are enabled. The communication in the MCS guarantees the digitalization, automation and centralization. Also provided are a satisfactory degree of safety, reliability, stability, expandability and flexibility for maintenance.

Synchro Controller of Radar on FPGA

This paper mainly represents the realization of synchro controller based on the programmable logic devices FPGA by request of HF ground wave radar synchro controller under the instance of making the best of the virtues of FPGA. This design introduces the data communication between PC and synchro controller by PC Bus, which can carry the synchronous signals parameters to RAM of synchro controller, then according to the theory that the result of comparing counter value with signals parameters is the needed wave, we produce all waves HF ground wave radar needs, moreover all waves are produced time-sharing in order to save resources.

A Control System of Material Handlingin FMS

The design of a control system for the material transport as used in gear-box flexible manufacturing system is presented in this paper. The scope of investigation covers material transport control, automatic vehicle, material exchange station, multi-storeyed warehouse system, NC and CNC machines and host computer etc. The paper describes the transport control system and its design, and briefly describes the communication among devices and warehouse access principles.

Real Time Control System for Metro Railways Using PLC & SCADA

This paper proposes to adopt SCADA and PLC technology for the improvement of the performance of real time signaling&train control systems in metro railways.The main concern of this paper is to minimize the failure in automated metro railways system operator and integrate the information coming from Operational Control Centre(OCC),traction SCADA system,traction power control,and power supply system.This work presents a simulated prototype of an automated metro train system operator that uses PLC and SCADA for the real time monitoring and control of the metro railway systems.Here,SCADA is used for the visualization of an automated process operation and then the whole opera-tion is regulated with the help of PLC.The PLC used in this process is OMRON(NX1P2-9024DT1)and OMRON’s Sysmac studio programming software is used for developing the ladder logic of PLC.The metro railways system has deployed infrastructure based on SCADA from the power supply system,and each station’s traction power control is connected to the OCC remotely which commands all of the stations and has the highest command priority.An alarm is triggered in the event of an emergency or system congestion.This proposed system overcomes the drawbacks of the current centralized automatic train control(CATC)system.This system provides prominent benefits like augmenting services which may enhance a network’s full load capacity and networkflexibility,which help in easy modification in the existing program at any time.

Novel design of a personnel safety system for Hefei Light Source-Ⅱ

The Hefei Light Source-Ⅱ(HLS-Ⅱ) is a vacuum ultraviolet synchrotron light source. The personnel safety system (PSS), which is a personnel access control system, is a crucial part of the HLS-Ⅱ, as it protects the staff and users at HLS-Ⅱfrom radiation damages. The prior version of HLS-Ⅱ PSS was based on an access control system called SiPass. This lacked the personnel management function. Meanwhile, as the prior PSS is a turn-key system, it was not effective for sharing information. To overcome these drawbacks, the novel design of PSS for HLS-Ⅱ is proposed based on the Siemens redundant programmable logic controller under the Experimental Physics and Industrial Control System. The proposed PSS consists of a safety interlock system, access control system, and a radiation monitoring system. The safety interlock system is used to define the interlock logic. The access control system is designed to restrict the access of staff and users at HLS-Ⅱ, and to provide a personnel management function. The radiation monitoring system is used to monitor the radiation dose rate in both the light source and the surrounding areas. This paper details the architecture and the specific design of the novel PSS. The off-line test results demonstrate that the proposed system has achieved the design objectives.

基于5G多接入边缘计算的云化PLC系统架构设计与应用

随着工业控制系统对柔性化、扁平化的要求不断提升,以PLC为构建基础的传统工业控制网络在大规模接入、算力提升和部署灵活性方面均受到限制.针对这些问题,融合5G网络和边缘计算技术,设计了基于5G多接入边缘计算的云化PLC系统架构,阐述了该架构的运行机制和所涉及的关键技术;在此基础上,进行PLC系统的云化部署和调试,实现了工业现场、企业数据中心、5G网络和边缘网络的集成;最后,通过在某汽车制造公司产线改造过程中的应用,验证了所提架构的有效性.

THE DESIGN OF VMEBUS BRIDGE CONTROLLER WITH SHARC BUS

Targeting at the high expense and inflexibility to realize VMEbus bridge controller by professional Integrated Circuit (IC), this paper presents a scheme of adopting CPLD/FPGA (Complicated Programmable Logic Device/Field Programmable Gate Array) to design bridge controller between VMEbus and local bus. SHARC DSP (Digital Signal Processor) bus is an example. It has functions of nearly entire master/slave interface of VMEbus, and can act as DMA (Direct Memory Access) controller and perform block transfer in DMA or master processor initiative way without length limit. External circuit of the design is very simple. In comparison with special ICs, it has high performance to price ratio and can be easily applied to local buses of other processors with quite a little modification.

Phase servo tuner control system of SSRF 500MHz cavity

Eight 500 MHz cavities are applied in the storage ring of the Shanghai Synchrotron Radiation Factility (SSRF). In order to tune the cavities for different changing parameters and operation modes, the control system is es- sential for operations. The tuning is achieved by synchronizing the drive signal and the cavity probe signal. The error signal defined as their subtraction is amplified and used to drive a stepping motor, which in turn moves a metallic plunger in or out of the cavity by programmable logic controller (PLC). The tune speed is set to be 1kHz/s.

基于PLC反渗透海水淡化控制系统的设计与开发

针对反渗透海水淡化系统工艺复杂、运维繁琐、对操作人员专业技能要求高的特点,研发了一套反渗透海水淡化控制系统。详细研究整个工艺系统中预处理、反渗透等关键工艺环节的原理及自动控制过程。从系统的硬件设计和软件开发两个方面进行详细阐述。硬件设计方面,根据装置规模和控制需求完成控制系统设备选型。软件开发方面,完成控制器及人机交互界面多套软件的开发。该系统成功应用于高校反渗透海水淡化教学实践课。应用结果表明:该系统设计合理、操作界面简洁方便,在稳定安全运行的同时可实现教学培训、故障处理等目的。该系统在提高海水淡化操作人员专业技能的同时,也对高校创新其他专业的实操培训课程提供了借鉴和技术支撑。

面向学科交叉融合的综合性实训教学装置设计与教学实践

针对工程训练实训教学装置功能单一、缺乏多学科交叉与整合能力等问题,以多种特征的物料识别与分拣为应用背景,在综合应用PLC控制技术、传感器技术、气动控制与机电传动控制技术的基础上,结合数字图像处理与卷积神经网络技术,基于树莓派与Jetson嵌入式计算平台,自主研制了一种物料特征识别与分拣综合实训教学装置。与现有同类实训装置相比,该自制实训装置具有体积小,功能多和成本低的优势。实践教学表明,将传统PLC控制与人工智能技术元素有机结合,以及将课内教学延伸至创客活动和学生第二课堂,能有效提升学生的工程认知水平和工程实践能力,体现多学科交叉、多技术融合的高等工程教育特征。