A rising tide: Design exploits in industrial control systems

10th USENIX Workshop on Offensive Technologies, WOOT 2016

Volumn , Issue , 2016, Pages

  Bolshev, Alexander ^a   Larsen, Jason ^b   Krotofil, Marina ^c   Wightman, Reid ^d  

^a IOActive   (Spain)

^b IOActive Inc   (United States)

^c HONEYWELL   (United States)

^d Digital Bond   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONTROL SYSTEMS;

CYBER SECURITY; DESIGN VULNERABILITIES; EMERGENT PROPERTY; INDUSTRIAL CONTROL SYSTEMS; SECURITY ASSESSMENT; SENSE OF SECURITY; SUB-COMPONENTS;

PROGRAM DEBUGGING;

EID: 85084164451     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (28)

1. ANALOG DEVICES . Circuit Design: Fully Isolate Input Module Based on the AD7793 24-Bit Σ-∆ ADC. http://tinyurl.com/jdvu6jd. Retreived: September 2015.
2. ANALOG DEVICES. AD7705/AD7706 – Datasheet. http://tinyurl.com/jkt6egr, 2006. Retreived: March 2015.
3. ASSANTE, M. J., AND LEE, R. The Industrial Control System Cyber Kill Chain. SANS Institute InfoSec Reading Room, Oct 2015.
4. ATMEL. ATmega16U4/ATmega32U4 – Datasheet. http://tinyurl.com/gs9lmdm, 2016. Retreived: September 2015.
5. BLACK, B. Analog-to-Digital Converter Architectures and Choices for System Design. Analog Dialogue 33, 8 (1999).
6. BOLSHEV, A., AND KROTOFIL, M. Never Trust Your Inputs (or how to fool ADC). Black Hat Asia 2016. http://tinyurl.com/zzz97tw. Retreived: April 2016.
7. BOLSHEV, A., AND MALINOVSKY, A. HART (In)Security. Zero Nights 2012. http://tinyurl.com/pyqxgbl. Retreived: April 2016.
8. DE SWARDT, H. Critical Speed on an Electric Motor Explained. Tech. rep., Marthinusen & Coutts, 2007.
9. DIDIER, P., MACIAS, F., HARSTAD, J., ANTHOLINE, R., ET AL. Converged Plantwide Ethernet (CPwE) Design and Implementation Guide. Cisco Systems and Rockwell Automation, 2011. http://tinyurl.com/6a8gmch. Retreived: April 2016.
10. KAMINSKY, D. Yet Another Dan Kaminsky Talk (About much more than RNG). DefCon 2014. http://tinyurl.com/ mf4bqq2. Retreived: April 2016.
11. KROTOFIL, M., AND LARSEN, J. Rocking the Pocket Book: Hacking Chemical Plants for Competition and Extortion. DefCon, 2015. http://tinyurl.com/jsutrht. Retreived: June 2016.
12. KROTOFIL, M., AND LARSEN, J. What You Always Wanted and Now Can: Hacking Chemical Processes. HITB, 2015. http://tinyurl.com/gnbuh7b. Retreived: April 2016.
13. LANGNER, R. To kill a centrifuge. Tech. rep., Langner Communications, 2013.
14. LARSEN, J. Breakage. black hat federal 2008. http://tinyurl.com/jvdsxjl. Retreived: April 2016.
15. LARSEN, J. Hacking Critical Infrastructure Like Youre Not a N00b. RSA 2016. http://tinyurl.com/hrshtlo. Retrieved: May, 2016.
16. LEVESON, N. G. Engineering a Safer World: Systems Thinking Applied to Safety. The MIT Press, 2012.
17. LINDNER, F. Building Custom Disassemblers – Instruction Set Reverse Engineering. Black Hat Europe 2011. http://tinyurl.com/hf78b54. Retreived: April 2016.
18. MAXIMUM INTEGRATED. NOVATO (MAXREFDES16#): 4-20MA Loop-Powered Temperature Sensor with HART. http://tinyurl.com/hetmjxu. Retreived: September 2015.
19. MCINTYRE, C. Using Smart Instrumentation. plant engineering: online magazine. http://tinyurl.com/jb3pouj, 2011. Retreived: April 2016.
20. MICROCHIP. MCP3201 – Datasheet. http://tinyurl.com/ jfo87mu, 2011. Retreived: October 2015.
21. PERRON, P. Test Consistency with Varying Sample Frequency. Econometric Theory 7 (1991), 341–368.
22. ROSS, R., MCEVILLEY, M., AND CARRIER OREN, J. NIST 800-160: Systems Security Engineering – Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems. NIST Special Publication, May 2016.
23. SCHNEIDER ELECTRIC. Altivar 12 – Variable speed drives for asynchronous motors. User manual. http://tinyurl.com/ h55kp8j, 2009. Retreived: September 2016.
24. SMUTS, J. F. Process Control for Practitioners. OptiControls Inc, 2011.
25. STAMATIS, D. H. Six Sigma and Beyond Series – Statistical Process Control, vol. 4. CRC Press, 2002.
26. TOECKER, M. Digital Maintenance and Test Equipment and Impact on Control System Security. 4SICS, 2015. http://tinyurl.com/gqa5klh. Retreived: June 2016.
27. WIGHTMAN, R. Modbus-VCR. GitHub repository, 2013. http://tinyurl.com/zxhjkho. Retreived: April 2016.
28. ZADDACH, J., KURMUS, A., BALZAROTTI, D., BLASS, E., FRANCILLON, A., GOODSPEED, T., GUPTAK, M., AND KOLTSIDAS, I. Implementation and Implications of a Stealth Hard-Drive Backdoor. In Proceedings ACSAC’13 (2013), pp. 279–288.