Publications

Authors:

Cozza, Vittoria; Dalla Preda, Mila; Lucchese, Marco; Merro, Massimo; Zannone, Nicola

Title:

Towards Obfuscation of Programmable Logic Controllers

Year:

2023

Type of item:

Contributo in atti di convegno

Tipologia ANVUR:

Contributo in Atti di convegno

Language:

Inglese

Format:

A Stampa

Congresso:

18th International Conference on Availability, Reliability and Security (ARES 2023, Track: SecIndustry)

Place:

Benevento, Italy

Period:

August 29-September 1

Publisher:

ACM Press

Page numbers:

1-10

Keyword:

Code obfuscation; Process comprehension; Programmable logic controller

Short description of contents:

Recently published scan data on Shodan shows how 105K IndustrialControl Systems (ICSs) around the world are directly accessiblefrom the Internet. In particular, highly sensitive components, suchas Programmable Logic Controllers (PLCs), are potentially accessibleto attackers who can implement several kinds of attacks. On theother hand, to accomplish non-trivial cyber-physical attacks theattacker must possess a sufficient degree of process comprehensionon the physical processes within the target ICS.In this paper, we explore the feasibility of designing obfuscationstrategies to prevent the attacker from comprehending the behaviorof the physical process within an ICS by accessing PLC memoryregisters. We propose two generic obfuscation strategies for PLCmemories, involving memory registers, PLC code, and simulatedphysical processes controlled by the obfuscated PLCs. We thenmeasure the effectiveness of the proposed obfuscation strategies interms of potency, resilience, and cost on a non-trivial case study.

Product ID:

134503

Handle IRIS:

11562/1097986

Last Modified:

September 7, 2024

Bibliographic citation:

Cozza, Vittoria; Dalla Preda, Mila; Lucchese, Marco; Merro, Massimo; Zannone, Nicola, Towards Obfuscation of Programmable Logic Controllers  in 18th International Conference on Availability, Reliability and Security (ARES 2023, Track: SecIndustry) , ACM Press , Proceedings of "18th International Conference on Availability, Reliability and Security (ARES 2023, Track: SecIndustry)" , Benevento, Italy , August 29-September 1 , 2023 , pp. 1-10

Consulta la scheda completa presente nel repository istituzionale della Ricerca di Ateneo