Pubblicazioni

Autori:

Cozza, Vittoria; Dalla Preda, Mila; Lucchese, Marco; Merro, Massimo; Zannone, Nicola

Titolo:

Towards Obfuscation of Programmable Logic Controllers

Anno:

2023

Tipologia prodotto:

Contributo in atti di convegno

Tipologia ANVUR:

Contributo in Atti di convegno

Lingua:

Inglese

Formato:

A Stampa

Titolo del Convegno:

18th International Conference on Availability, Reliability and Security (ARES 2023, Track: SecIndustry)

Luogo:

Benevento, Italy

Periodo:

August 29-September 1

Casa editrice:

ACM Press

Intervallo pagine:

1-10

Parole chiave:

Code obfuscation; Process comprehension; Programmable logic controller

Breve descrizione dei contenuti:

Recently published scan data on Shodan shows how 105K IndustrialControl Systems (ICSs) around the world are directly accessiblefrom the Internet. In particular, highly sensitive components, suchas Programmable Logic Controllers (PLCs), are potentially accessibleto attackers who can implement several kinds of attacks. On theother hand, to accomplish non-trivial cyber-physical attacks theattacker must possess a sufficient degree of process comprehensionon the physical processes within the target ICS.In this paper, we explore the feasibility of designing obfuscationstrategies to prevent the attacker from comprehending the behaviorof the physical process within an ICS by accessing PLC memoryregisters. We propose two generic obfuscation strategies for PLCmemories, involving memory registers, PLC code, and simulatedphysical processes controlled by the obfuscated PLCs. We thenmeasure the effectiveness of the proposed obfuscation strategies interms of potency, resilience, and cost on a non-trivial case study.

Id prodotto:

134503

Handle IRIS:

11562/1097986

ultima modifica:

7 settembre 2024

Citazione bibliografica:

Cozza, Vittoria; Dalla Preda, Mila; Lucchese, Marco; Merro, Massimo; Zannone, Nicola, Towards Obfuscation of Programmable Logic Controllers  in 18th International Conference on Availability, Reliability and Security (ARES 2023, Track: SecIndustry) , ACM Press , Atti di "18th International Conference on Availability, Reliability and Security (ARES 2023, Track: SecIndustry)" , Benevento, Italy , August 29-September 1 , 2023 , pp. 1-10

Consulta la scheda completa presente nel repository istituzionale della Ricerca di Ateneo