<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04165414</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-04-26T20:06:33+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">PLC Logic-Based Cybersecurity Risks Identification for ICS</title>
            <title xml:lang="fr">Identification des risques de cybersécurité des SCI basée sur la logique des API</title>
            <author role="aut">
              <persName>
                <forename type="first">Mike</forename>
                <surname>Da Silva</surname>
              </persName>
              <email type="md5">7534854117dfde54c3deaca1ab7010e0</email>
              <email type="domain">univ-smb.fr</email>
              <idno type="idhal" notation="string">mike-da-silva</idno>
              <idno type="idhal" notation="numeric">1271182</idno>
              <idno type="halauthorid" notation="string">2863439-1271182</idno>
              <idno type="ORCID">https://orcid.org/0009-0007-5505-4742</idno>
              <affiliation ref="#struct-40214"/>
              <affiliation ref="#struct-1042703"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Maxime</forename>
                <surname>Puys</surname>
              </persName>
              <email type="md5">b71493192a84eca99a9e24cba068e61b</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="string">maxime-puys</idno>
              <idno type="idhal" notation="numeric">8348</idno>
              <idno type="halauthorid" notation="string">27667-8348</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-6127-9816</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=nkNvw8wAAAAJ&amp;hl=fr</idno>
              <idno type="IDREF">https://www.idref.fr/230747302</idno>
              <affiliation ref="#struct-40214"/>
              <affiliation ref="#struct-1042703"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Pierre-Henri</forename>
                <surname>Thevenon</surname>
              </persName>
              <email type="md5">7aa6eb48230dfcd86244a8e767632c0c</email>
              <email type="domain">cea.fr</email>
              <idno type="idhal" notation="numeric">1271131</idno>
              <idno type="halauthorid" notation="string">651763-1271131</idno>
              <affiliation ref="#struct-40214"/>
              <affiliation ref="#struct-1042703"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Stéphane</forename>
                <surname>Mocanu</surname>
              </persName>
              <email type="md5">a90421d358e8c1783ee10e3654f51cf7</email>
              <email type="domain">imag.fr</email>
              <idno type="idhal" notation="string">stephane-mocanu</idno>
              <idno type="idhal" notation="numeric">7914</idno>
              <idno type="halauthorid" notation="string">13887-7914</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-3074-2430</idno>
              <idno type="IDREF">https://www.idref.fr/11291196X</idno>
              <affiliation ref="#struct-1043301"/>
              <affiliation ref="#struct-1043329"/>
              <affiliation ref="#struct-1043324"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>MIKE</forename>
                <surname>DA SILVA</surname>
              </persName>
              <email type="md5">7534854117dfde54c3deaca1ab7010e0</email>
              <email type="domain">univ-smb.fr</email>
            </editor>
            <funder ref="#projanr-42467"/>
            <funder ref="#projanr-49925"/>
            <funder>CEA-LETI</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2023-07-19 08:26:58</date>
              <date type="whenWritten">2023</date>
              <date type="whenModified">2025-10-27 09:38:05</date>
              <date type="whenReleased">2023-07-19 08:43:23</date>
              <date type="whenProduced">2023-08-29</date>
              <date type="whenEndEmbargoed">2023-07-19</date>
              <ref type="file" target="https://hal.science/hal-04165414v1/document">
                <date notBefore="2023-07-19"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04165414v1/file/ares2023-119_fv.pdf" id="file-4165414-3627342">
                <date notBefore="2023-07-19"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1133125">
                <persName>
                  <forename>MIKE</forename>
                  <surname>DA SILVA</surname>
                </persName>
                <email type="md5">7534854117dfde54c3deaca1ab7010e0</email>
                <email type="domain">univ-smb.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04165414</idno>
            <idno type="halUri">https://hal.science/hal-04165414</idno>
            <idno type="halBibtex">dasilva:hal-04165414</idno>
            <idno type="halRefHtml">&lt;i&gt;ARES 2023 - 18th International Conference on Availability, Reliability and Security&lt;/i&gt;, Aug 2023, Benevento, Italy. pp.1-10, &lt;a target="_blank" href="https://dx.doi.org/10.1145/3600160.3605067"&gt;&amp;#x27E8;10.1145/3600160.3605067&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">ARES 2023 - 18th International Conference on Availability, Reliability and Security, Aug 2023, Benevento, Italy. pp.1-10, &amp;#x27E8;10.1145/3600160.3605067&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4165414-3627342"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CEA">CEA - Commissariat à l'énergie atomique</idno>
            <idno type="stamp" n="UGA">HAL Grenoble Alpes</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INPG">Institut polytechnique de Grenoble</idno>
            <idno type="stamp" n="INRIA-RHA">INRIA Grenoble - Rhône-Alpes</idno>
            <idno type="stamp" n="LIG">Laboratoire d'Informatique de Grenoble</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="DRT" corresp="CEA">Direction de la recherche technologique</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="LIG-GLSI-CTRL-A" corresp="LIG_GLSI">CTRL-A : ConTRoL for safe Autonomic computing systems</idno>
            <idno type="stamp" n="LETI" corresp="CEA">Laboratoire d'Electronique et des Technologies de l'Information</idno>
            <idno type="stamp" n="INRIA-RENGRE">INRIA-RENGRE</idno>
            <idno type="stamp" n="CYBERALPS">Grenoble Alpes Cybersecurity Institute</idno>
            <idno type="stamp" n="CEA-GRE" corresp="CEA">CEA Grenoble</idno>
            <idno type="stamp" n="UGA-EPE">Université Grenoble Alpes [2020-*]</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="LIG_SIDCH" corresp="LIG">Systèmes intelligents pour les données, les connaissances et les humains</idno>
            <idno type="stamp" n="TEST-UGA">TEST-UGA</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">PLC Logic-Based Cybersecurity Risks Identification for ICS</title>
                <title xml:lang="fr">Identification des risques de cybersécurité des SCI basée sur la logique des API</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Mike</forename>
                    <surname>Da Silva</surname>
                  </persName>
                  <email type="md5">7534854117dfde54c3deaca1ab7010e0</email>
                  <email type="domain">univ-smb.fr</email>
                  <idno type="idhal" notation="string">mike-da-silva</idno>
                  <idno type="idhal" notation="numeric">1271182</idno>
                  <idno type="halauthorid" notation="string">2863439-1271182</idno>
                  <idno type="ORCID">https://orcid.org/0009-0007-5505-4742</idno>
                  <affiliation ref="#struct-40214"/>
                  <affiliation ref="#struct-1042703"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Maxime</forename>
                    <surname>Puys</surname>
                  </persName>
                  <email type="md5">b71493192a84eca99a9e24cba068e61b</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="string">maxime-puys</idno>
                  <idno type="idhal" notation="numeric">8348</idno>
                  <idno type="halauthorid" notation="string">27667-8348</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-6127-9816</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=nkNvw8wAAAAJ&amp;hl=fr</idno>
                  <idno type="IDREF">https://www.idref.fr/230747302</idno>
                  <affiliation ref="#struct-40214"/>
                  <affiliation ref="#struct-1042703"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Pierre-Henri</forename>
                    <surname>Thevenon</surname>
                  </persName>
                  <email type="md5">7aa6eb48230dfcd86244a8e767632c0c</email>
                  <email type="domain">cea.fr</email>
                  <idno type="idhal" notation="numeric">1271131</idno>
                  <idno type="halauthorid" notation="string">651763-1271131</idno>
                  <affiliation ref="#struct-40214"/>
                  <affiliation ref="#struct-1042703"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Stéphane</forename>
                    <surname>Mocanu</surname>
                  </persName>
                  <email type="md5">a90421d358e8c1783ee10e3654f51cf7</email>
                  <email type="domain">imag.fr</email>
                  <idno type="idhal" notation="string">stephane-mocanu</idno>
                  <idno type="idhal" notation="numeric">7914</idno>
                  <idno type="halauthorid" notation="string">13887-7914</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-3074-2430</idno>
                  <idno type="IDREF">https://www.idref.fr/11291196X</idno>
                  <affiliation ref="#struct-1043301"/>
                  <affiliation ref="#struct-1043329"/>
                  <affiliation ref="#struct-1043324"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>ARES 2023 - 18th International Conference on Availability, Reliability and Security</title>
                  <date type="start">2023-08-29</date>
                  <date type="end">2023-09-01</date>
                  <settlement>Benevento</settlement>
                  <country key="IT">Italy</country>
                </meeting>
                <imprint>
                  <biblScope unit="pp">1-10</biblScope>
                </imprint>
              </monogr>
              <idno type="doi">10.1145/3600160.3605067</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Safety</term>
                <term xml:lang="en">Security</term>
                <term xml:lang="en">Cybersecurity</term>
                <term xml:lang="en">Risk assessment</term>
                <term xml:lang="en">Risk analysis</term>
                <term xml:lang="en">SCADA</term>
                <term xml:lang="en">ICS</term>
                <term xml:lang="en">IT</term>
                <term xml:lang="en">OT</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In recent years, Informational Technologies (IT) was massively deployed into Industrial Control Systems (ICS) mainly for its economic benefits. However, this new paradigm, converging IT and Operational Technologies (OT), brings new challenges that companies need to face. Historically, ICS had to cope with safety requirements which ensure the protection of people, environment, and assets. Now, ICS must deal with additional threats, coming from cyberattacks, in order to maintain safety. For that purpose, it becomes essential to develop new cybersecurity technologies and methodologies that allow to assess the safety of ICS against cyberattacks. In this paper, we propose a new methodology, based on Programmable Logic Controller (PLC) logic in order to identify cyberattacks that impacts the ICS safety. Our methodology transforms a PLC logic into a finite-state machine that represents the PLC behavior. Then, using this automaton, we identify which modifications in states of sensors and actuators leads to compromising the safety. Finally, we build attack scenarios from these events and the network vulnerabilities. We apply our methodology on a simple example, yet challenging to analyze by hand, and we show how we manage to scale up on a classical example from the control systems domain: the Tennessee Eastman chemical process.</p>
            </abstract>
            <particDesc>
              <org type="consortium">CYBERALPS</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-40214" status="VALID">
          <idno type="IdRef">026506351</idno>
          <idno type="ISNI">0000 0001 2184 7102</idno>
          <idno type="RNSR">196718590E</idno>
          <idno type="ROR">https://ror.org/04mf0wv34</idno>
          <idno type="Wikidata">Q1023249</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives - Laboratoire d'Electronique et de Technologie de l'Information</orgName>
          <orgName type="acronym">CEA-LETI</orgName>
          <date type="start">1967-01-01</date>
          <desc>
            <address>
              <addrLine>MINATEC 17, rue des Martyrs, 38054, Grenoble Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www-leti.cea.fr/</ref>
          </desc>
          <listRelation>
            <relation name="DRT" active="#struct-440043" type="direct"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-1042703" status="VALID">
          <idno type="IdRef">240648315</idno>
          <idno type="ROR">https://ror.org/02rx3b187</idno>
          <orgName>Université Grenoble Alpes</orgName>
          <orgName type="acronym">UGA</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Adresse CS 40700 - 38058 Grenoble cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-grenoble-alpes.fr</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-1043301" status="VALID">
          <idno type="IdRef">148425550</idno>
          <idno type="ISNI">0000 0001 2286 4035</idno>
          <idno type="RNSR">200711886U</idno>
          <idno type="ROR">https://ror.org/01c8rcg82</idno>
          <orgName>Laboratoire d'Informatique de Grenoble</orgName>
          <orgName type="acronym">LIG</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>UMR 5217 - Laboratoire LIG - Bâtiment IMAG - 700 avenue Centrale - Domaine Universitaire de Saint-Martin-d’Hères Adresse postale : CS 40700 - 38058 Grenoble cedex 9Tél. : 04 57 42 14 00</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.liglab.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
            <relation name="UMR5217" active="#struct-441569" type="direct"/>
            <relation active="#struct-1042703" type="direct"/>
            <relation active="#struct-1043329" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-1043329" status="VALID">
          <idno type="IdRef">026388804</idno>
          <idno type="ROR">https://ror.org/05sbt2524</idno>
          <orgName>Institut polytechnique de Grenoble - Grenoble Institute of Technology</orgName>
          <orgName type="acronym">Grenoble INP</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>46 avenue Félix Viallet 38031 Grenoble Cedex 1</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.grenoble-inp.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-1042703" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-1043324" status="VALID">
          <idno type="RNSR">201421117X</idno>
          <idno type="ROR">https://ror.org/045ff8v85</idno>
          <orgName>Control for Autonomic computing systems</orgName>
          <orgName type="acronym">CTRL-A</orgName>
          <date type="start">2020-01-01</date>
          <date type="end">2026-06-30</date>
          <desc>
            <address>
              <addrLine>Centre de Recherche Inria 655, avenue de l'Europe 38334 Saint Ismier Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://team.inria.fr/ctrl-a/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-2497" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-1043301" type="direct"/>
            <relation name="UMR5217" active="#struct-441569" type="indirect"/>
            <relation active="#struct-1042703" type="indirect"/>
            <relation active="#struct-1043329" type="indirect"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-440043" status="VALID">
          <idno type="IdRef">067087930</idno>
          <idno type="ISNI">0000000121157881</idno>
          <idno type="RNSR">199018589D</idno>
          <idno type="ROR">https://ror.org/02ggzyd20</idno>
          <idno type="Wikidata">Q30299418</idno>
          <orgName>Direction de Recherche Technologique (CEA)</orgName>
          <orgName type="acronym">DRT (CEA)</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.drt-cea.com/</ref>
          </desc>
          <listRelation>
            <relation name="DRT" active="#struct-300016" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300016" status="VALID">
          <idno type="IdRef">026372061</idno>
          <idno type="ISNI">0000000122998025</idno>
          <idno type="ROR">https://ror.org/00jjx8s55</idno>
          <idno type="Wikidata">Q868550</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives</orgName>
          <orgName type="acronym">CEA</orgName>
          <desc>
            <address>
              <addrLine>Centre de SaclayCentre de GrenobleCentre de Cadaracheetc</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cea.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-2497" status="VALID">
          <idno type="RNSR">199218244V</idno>
          <idno type="ROR">https://ror.org/00n8d6z93</idno>
          <orgName>Centre Inria de l'Université Grenoble Alpes</orgName>
          <desc>
            <address>
              <addrLine>Inovallée655 avenue de l'Europe38330 Montbonnot</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/grenoble</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-42467" status="VALID">
          <idno type="anr">ANR-15-IDEX-0002</idno>
          <orgName>UGA</orgName>
          <desc>IDEX UGA</desc>
          <date type="start">2015</date>
        </org>
        <org type="anrProject" xml:id="projanr-49925" status="VALID">
          <idno type="anr">ANR-10-AIRT-0005</idno>
          <orgName>NANOELEC</orgName>
          <desc>NANOELEC</desc>
          <date type="start">2010</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>