Detection and Blocking Method against DLL Injection Attack Using PEB-LDR of ICS EWS in Smart IoT Environments

<p>Modern Industrial Control System (ICS) can provide vast functions as the introduction of IT technology is established along with IoT environment. Engineering Workstation (EWS) used by ICS widely to efficiently manage and control industrial devices including smart devices. However, DLL injection attack in not high difficulty compared risk, but it cause fatal malfunction. If an carried out targeting EWS, may erroneous operation many devices, accidents throughout Supervisory Data Acquisition (SCADA) system. In this paper, we present a method detect attacks specializing EWS environment purpose data changes due analyzing utilizing PEB-LDR data. Also, block execution when malicious suspected be loaded injection.</p> <p> </p>