Ladder logic Diagram (LLD) as the interfacing programming language of programmable logic controllers (PLCs) is utilized in modern discrete event control systems. However, LLD is hard to debug and maintain in practice....
详细信息
ISBN:
(纸本)0780394259
Ladder logic Diagram (LLD) as the interfacing programming language of programmable logic controllers (PLCs) is utilized in modern discrete event control systems. However, LLD is hard to debug and maintain in practice. This is due to many factors such as non-structured nature of LLD, the LLD programmers' background, and the huge sizes of real world LLD. In this paper, we introduce a Recurrent Neural Network (RNN) based technique for PLC program diagnosis. A manufacturing control system example has been presented to illustrate the applicability of the proposed algorithm. This method could be very advantageous in reducing the complexity in PLC control programs diagnosis because of the ease of use of the RNN compared to debugging the LLD code.
Nations rely heavily on critical infrastructures to be the backbone of both the economy and the nation's general well-being. Many of these critical infrastructures depend on Industrial Control Systems (ICS). ICS i...
详细信息
Nations rely heavily on critical infrastructures to be the backbone of both the economy and the nation's general well-being. Many of these critical infrastructures depend on Industrial Control Systems (ICS). ICS is a general term used to describe an interaction where data is received from sensors and then actions are taken based off the data received. Most ICSs were designed and implemented before the Internet became widely used. When some systems were finally connected to the Internet, the emphasis was on the integrity of the data sent and the availability between devices, not the confidentiality. This lack of confidentiality is why ICS security is the focus of this research. The problem this research investigates is finding an optimal Synchronization Al- gorithm used to synchronize a back-end programmable logic controller (PLC) with a honeypot in the ScriptGenE Framework, which is a honeypot solution to ICS secu- rity. A honeypot is designed to emulate a desired device on the network and can be a superficial emulation or a complete replication of the desired device. This research uses the ScriptGenE Framework as a Hybrid Honeypot solution. ScriptGenE is a Hybrid Honeypot because each instance of the honeypot is only a superficial emulation with a finite amount of data about the device it is emulating. However, each honeypot is connected to a back-end PLC, identical to the device being emulated for the ability to provide more authentic responses than just a superficial emulation. Synchronization between the back-end PLC and the honeypot is impor- tant for the emulation of a device's protocol because some protocols are stateful and provide responses to requests based on previous requests. The honeypot needs to ensure the back-end PLC is in the same state before sending a request to the PLC. This research hypothesizes: selecting a Synchronization Algorithm for the Script- GenE Framework based on the shape and size of the protocol tree will yield faster latency respon
Attacks on industrial control systems and critical infrastructure are on the rise. Im- portant systems and devices like programmable logic controllers are at risk due to outdated technology and ad hoc security measure...
详细信息
Attacks on industrial control systems and critical infrastructure are on the rise. Im- portant systems and devices like programmable logic controllers are at risk due to outdated technology and ad hoc security measures. To mitigate the threat, honeypots are deployed to gather data on malicious intrusions and exploitation techniques. While virtual honeypots mitigate the unreasonable cost of hardware-replicated honeypots, these systems often suffer from a lack of authenticity due to proprietary hardware and network protocols. In addition, virtual honeynets utilizing a proxy to a live device suffer from performance bottlenecks and limited scalability. This research develops an enhanced, application layer emulator capable of alle- viating honeynet scalability and honeypot inauthenticity limitations. The proposed emulator combines protocol-agnostic replay with dynamic updating via a proxy. The result is a software tool which can be readily integrated into existing honeypot frame- works for improved performance. The proposed emulator is evaluated on traffic reduction on the back-end proxy device, application layer task accuracy, and byte-level traffic accuracy. Experiments show the emulator is able to successfully reduce the load on the proxy device by up to 98% for some protocols. The emulator also provides equal or greater accuracy over a design which does not use a proxy. At the byte level, traffic variation is statistically equivalent while task success rates increase by 14% to 90% depending on the protocol. Finally, of the proposed proxy synchronization algorithms, templock and its minimal variant are found to provide the best overall performance.
Much of the critical infrastructure of the world is controlled by programmable logic controllers (PLC). These PLCs regulate the processes of these industries, and there- fore are targets for malicious actors around th...
详细信息
Much of the critical infrastructure of the world is controlled by programmable logic controllers (PLC). These PLCs regulate the processes of these industries, and there- fore are targets for malicious actors around the globe. Honeypots are one of various security mechanisms that can be deployed to help protect these vital systems. In order to work, a honeypot must accurately mimic the system under protection. How- ever, within the PLC market there are numerous manufacturers and protocols which makes mimicking PLCs using one monolithic software package a daunting task. To mitigate this shortfall, ScriptGenE, a protocol-agnostic framework capable of accu- rately creating PLC honeypots, is designed. ScriptGenE uses previously captured PLC traffic to create a tree of the protocol and selectively respond to application layer requests in an accurate way. This research integrates ScriptGenE with Honeyd to provide the PLC honeypots with an accurate network layer. This combination provides a comprehensive PLC honeypot. Testing is done by using the combined framework to emulate a network of Allen- Bradley ControlLogix, Allen-Bradley CompactLogix, and Siemens S7-300 PLCs. A series of tools are used to evaluate the legitimacy of the emulated PLC network including Nmap, Honeyscore, RSLinx, STEP7, and Wget. Nmap and Honeyscore are used to show that the combined framework is able to accurately emulate the network layer of three different PLC types with 100 percent accuracy. Using Wget, RSLinx, and STEP7, this research shows the ability to emulate more advanced application layer protocols such as ENIP, ISOTASP, and HTTP with accuracies of 78, 100, and 67 percent respectively. This completed framework provides a viable solution to help protect critical infrastructure around the world.
programmable logic controllers (PLCs) are widely used in industrial electronic systems. With the augmenting complexity of system, the reliability poses a crucial challenge in safety critical applications. This paper p...
详细信息
programmable logic controllers (PLCs) are widely used in industrial electronic systems. With the augmenting complexity of system, the reliability poses a crucial challenge in safety critical applications. This paper proposes a formal modeling and verification approach for programming function block diagrams. Function block diagrams are formalized in a logic specification system. We consider the equivalence checking problem which occurs frequently between design implementations under different performance constraints. We present a novel method to harness a powerful co-induction proof strategy with bisimulation to establish the equivalence in a higher-order logic theorem proving system. We validate the effectiveness of our approach by a real industry application example with key scenarios. The soundness and the completeness of our approach are substantiated.
Robot workcell system design involves integrating one or more robots with components such as conveyors, pallets, machine tools, and fixtures. Previous work in workcell design has addressed control and operations manag...
详细信息
Robot workcell system design involves integrating one or more robots with components such as conveyors, pallets, machine tools, and fixtures. Previous work in workcell design has addressed control and operations management issues such as scheduling. There has been relatively little emphasis on overall design, interface, system integration and agility issues. This paper provides a detailed technical description of (1) a cost-effective approach to prototyping a robotic assembly workcell using off-the-shelf modules and sensors; and (2) the process of designing, building, and integrating a dual robot assembly cell using a programmable logic controller. Modules and sensors used include pneumatic devices, solenoids, Hall effect and optical sensors, relays, optical isolators, conveyor, programmable logic controller, and vision system. Ladder diagrams, vision system inspection tools, and an integration interface were developed to synchronize the sequence of operations and communication between hardware devices. A design framework for web-based control of the system is proposed. Future research directions include web-based monitoring, control, and troubleshooting.
In recent years, attacks such as the Stuxnet malware have demonstrated that cyberattacks against control systems cause extensive damage. These attacks can result in physical damage to the networked systems under their...
详细信息
In recent years, attacks such as the Stuxnet malware have demonstrated that cyberattacks against control systems cause extensive damage. These attacks can result in physical damage to the networked systems under their control. In this paper, we discuss our approach for detecting such attacks by distinguishing between programs running on a programmable logic controller (PLC) without having to monitor communications. Using power signatures generated by an attached, high-frequency power measurement device, we can identify what a PLC is doing and when an attack may have altered what the PLC should be doing. To accomplish this, we generated labeled data for testing our methods and applied feature engineering techniques and machine learning models. The results demonstrate that Random Forests and Convolutional Neural Networks classify programs with up to 98% accuracy for major program differences and 84% accuracy for minor differences. Our results can be used for both online and offline applications. (C) 2019 Elsevier B.V. All rights reserved.
A low-cost portable programmable logic controller (PLC) kit consisting of a controller module and three swappable special function modules - Basic I/O, Sensor, and Automated System - was designed, built, and evaluated...
详细信息
A low-cost portable programmable logic controller (PLC) kit consisting of a controller module and three swappable special function modules - Basic I/O, Sensor, and Automated System - was designed, built, and evaluated. The special function modules can be quickly connected to or disconnected from the controller module to teach different aspects of automation and control, including PLC programming fundamentals, sensor applications in automation, I/O interfacing, and system integration concepts. The kits were used within an upper-level undergraduate manufacturing automation and robotics course to provide students the opportunity to practice programming fundamentals while still in the classroom and for a system integration project in which students built small-scale working models of automated systems. Kits with Basic I/O and Sensor modules were evaluated by 80 students and kits with the Automated System modules were evaluated by 12 students. Evaluation results suggest that the Portable PLC kit is both usable and useful for helping students to practice PLC programming concepts. Students appreciated the opportunity to immediately practice concepts taught during lecture and to visualize results. In addition, students who used Portable PLC to build an automated system found the experience to be helpful for understanding how to interface devices and for integrating the concepts learned in class.
To architecturally support the programming of safety related control applications in the graphical language Function Block Diagram and the verification of such software meeting the requirements of Safety Integrity Lev...
详细信息
To architecturally support the programming of safety related control applications in the graphical language Function Block Diagram and the verification of such software meeting the requirements of Safety Integrity Level SIL 3, a dedicated, low complexity execution platform is presented. Its hardware is fault detecting to immediately initiate emergency shut-downs in case of malfunctions. By design, there is no semantic gap between the programming and machine execution levels, enabling the safety licensing of application software by extremely simple, but rigorous methods, viz., diverse back translation and inspection. Operating in a strictly periodic fashion, the platform exhibits fully predictable real time behaviour.
This paper shows how to implement a vision-based control for a Ball on Ball system. The control task is to stabilize a ball on top of another ball in the unstable upper rest position. In order to stabilize the upper b...
详细信息
This paper shows how to implement a vision-based control for a Ball on Ball system. The control task is to stabilize a ball on top of another ball in the unstable upper rest position. In order to stabilize the upper ball, the position of the upper ball has to be measured. This is done optionally by using two triangulation sensors or an industrial camera. To stabilize the upper ball in the unstable upper rest position, a PD controller, a linear quadratic regulator, and a flatness-based nonlinear controller are designed. By using these controllers and the designed image processing, which are implemented entirely on a standard industrial programmable logic controller, it is possible to stabilize the upper ball with both measurement types. The disturbance rejection of the system is shown, and the resulting RMS position error when stabilizing the upper ball is 1.8 mrad.
暂无评论