Off-the-Shelf Solutions as Potential Cyber Threats to Industrial Environments and Simple-To-Implement Protection Methodology

The paper investigates cyber threats and potential solutions for protecting industrial control systems (ICS). On the side, different off-the-shelf offensive solutions, both hardware software, are analysed tested. goal of is to increase threat awareness by showing how such well known IT security experts, can be utilised as (or inspire) attack vectors gain access generally unprotected plants. After obtaining an accessing point, Man-in-the-Middle (MITM) Legal-Client-to-Server (LCSA) types attacks from reconnaissance, client-to-server server-to-client categories demonstrated. For this purpose, a Modbus communication protocol implemented in real compressor station used basis. Regarding protection proposes simple-to-implement cheap hardening methodology applicable inside almost any plant. A novel, PLC-based ICS method, made signal validity monitoring mechanism system integrity check also discussed Both penetration testing verified experimentally, using PLC HMI devices.