Detection and Mitigation of Time Delay Injection Attacks on Industrial Control Systems with PLCs

2017 ◽  
pp. 62-74 ◽  
Author(s):  
Emrah Korkmaz ◽  
Matthew Davis ◽  
Andrey Dolgikh ◽  
Victor Skormin
Keyword(s):  
Time Delay ◽  
Control Systems ◽  
Industrial Control ◽  
Industrial Control Systems ◽  
Injection Attacks

scholarly journals Simulating command injection attacks on IEC 60870-5-104 protocol in SCADA system

2018 ◽  
Vol 7 (2.14) ◽  
pp. 153 ◽  
Author(s):  
Qais Saif Qassim ◽  
Norziana Jamil ◽  
Maslina Daud ◽  
Norhamadi Ja'affar ◽  
Salman Yussof ◽  
...  
Keyword(s):  
Control System ◽  
Power System ◽  
Control Systems ◽  
Industrial Control ◽  
Power Utility ◽  
Industrial Control Systems ◽  
Injection Attacks ◽  
Scada System ◽  
Control Command ◽  
Catastrophic Impact

IEC 60870-5-104 is an international standard used for tele-control in electrical engineering and power system applications. It is one of the major principal protocols in SCADA system. Major industrial control vendors use this protocol for monitoring and managing power utility devices. One of the most common attacks which has a catastrophic impact on industrial control systems is the control command injection attack. It happens when an attacker injects false control commands into a control system. This paper presents the IEC 60870-5-104 vulnera-bilities from the perspective of command and information data injection. From the SCADA testbed that we setup, we showed that a success-ful control command injection attack can be implemented by exploiting the vulnerabilities identified earlier.  

Sign in / Sign up

Export Citation Format

Share Document