On shaky ground - A study of security vulnerabilities in control protocols

5th International Topical Meeting on Nuclear Plant Instrumentation Controls, and Human Machine Interface Technology (NPIC and HMIT 2006)

Volumn 2006, Issue , 2006, Pages 782-788

  Byres, Eric J ^a   Huffman, Dan ^c   Kube, Nate ^b  

^a Wurldtech Research Inc   (Canada)

^b Wurldtech Analytics Inc   (Canada)

^c UNIVERSITY OF VICTORIA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; ETHERNET; FORMAL LANGUAGES; INFORMATION TECHNOLOGY; NUCLEAR INDUSTRY; SECURITY SYSTEMS;

CONTROL PROTOCOLS; MALWARE; NETWORK HACKERS; NUCLEAR INDUSTRY CONTROL DEVICES;

NETWORK PROTOCOLS;

EID: 34047124637     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (7)

1. Vulnerability Note VU#190617: LiveData ICCP Server heap buffer, US Computer Emergency Response Team, May 16, 2006, http://www.kb.cert.org/vuls/ id/190617
2. D. P. DUGGAN, M. BERG, J. DILLINGER and J. STAMP; "Penetration Testing of Industrial Control Systems", Sandia National Laboratories, March 7, 2005.
3. E.J. BYRES, J. CARTER, A. ELRAMLY and D. HUFFMAN; "Worlds in Collision: Ethernet on the Plant Floor", ISA Emerging Technologies Conference, Instrumentation Systems and Automation Society, Chicago, October (2002).
4. R. KAKSONEN, M. LAASKO and A. TAKANEN, "Vulnerability analysis of software through syntax testing," University of Oulu, Finland, Tech. Rep. (2000).
5. O. TAL, S. KNIGHT and T. DEAN, "Syntax-based vulnerability testing of frame-based network protocols," Privacy, Security and Trust (2004).
6. D. INCE, "The automatic generation of test data," The Computer Journal, 30, 1 (1987).
7. E. G. SIRER and B. N. BERSHAD, "Using production grammars in software testing," PLAN '99: Proceedings of the 2nd conference on Domain-specific languages, New York, NY, pp 1-13, ACM Press, (1999).