Security issues and mitigation in Ethernet POWERLINK - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2016

Security issues and mitigation in Ethernet POWERLINK

Résumé

Ethernet POWERLINK is an industrial Ethernet protocol created for applications with high degree of determinism, and amongst the closest to real-time (class 3 industrial Ethernet protocol). Consequently, it was developed for efficiency and short cycle times, with no security as it would only slow down the communications. In this paper, we show that most of the common known industrial Ethernet attacks cannot be carried out for Ethernet POWERLINK due to its isochronous real-time characteristics. We also show that it is still possible to perform attacks to affect such a system. We thus present five different attacks: a denial of service, a command insertion for a slave and then for a master, and impersonation of a slave and, finally, of a master. These attacks are afterwards validated on a testbed. We finally present proposals to defend against them without adding any major delay in the cyclic communications, by modifying transitions of the state machines of the protocol
Fichier non déposé

Dates et versions

hal-01560206 , version 1 (11-07-2017)

Identifiants

Citer

Jonathan Yung, Hervé Debar, Louis Granboulan. Security issues and mitigation in Ethernet POWERLINK. CYBERICPS 2016 : 2nd international workshop on Security of Industrial Control Systems and Cyber-Physical Systems, Sep 2016, Heraklion, Greece. ⟨10.1007/978-3-319-61437-3_6⟩. ⟨hal-01560206⟩
94 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More