Portal de Periódicos da CAPES

Towards the Protection of Industrial Control Systems – Conclusions of a Vulnerability Analysis of Profinet IO

2013; Springer Science+Business Media; Linguagem: Inglês

10.1007/978-3-642-39235-1_10

1611-3349

Andreas Paul, Franka Schuster, Hartmut König,

Advanced Malware Detection Techniques

The trend of introducing common information and communication technologies into automation control systems induces besides many benefits new security risks to industrial plants and critical infrastructures. The increasing use of Internet protocols in industrial control systems combined with the introduction of Industrial Ethernet on the field level facilitate malicious intrusions into automation systems. The detection of such intrusions requires a detailed vulnerability analysis of the deployed protocols to find possible attacks. Profinet IO is one of the emerging protocols for decentralized control in the European automation industry which has found wide application. In this paper, we describe as results of a vulnerability analysis of the Profinet IO protocol several possible attacks on this protocol. Thereafter we discuss an appropriate protection of automation networks using anomaly-based intrusion detection as an effective countermeasure to address these attacks.