Abstract-- Physical control systems are increasingly controlled by reconfigurable, network-enabled devices to increase flexibility and ease commissioning and maintenance. Such capability creates vulnerabilities. Devices may be remotely reprogrammed by a malicious actor to act in unintended ways, causing physical damage to mechanical equipment, infrastructure, and life and limb. In this paper, past examples of actual damage to cyber- physical systems are shown, threats posed by software-controlled Variable Frequency Drives (VFDs) are analyzed, and a small-scale version of an attack on ubiquitous VFD equipment is demonstrated.

Early Research Paper

Identifying and Anticipating Cyber Attacks that Could Cause Physical Damage to Industrial Control Systems

James L. Kirtley, Jr.

Shaharyar Khan

Matthew Angle

Stuart Madnick

Person

Authors

Date Published

A link to download this paper as a PDF, if available.

PDF Version

CAMS Research

Description	Abstract-- Physical control systems are increasingly controlled by reconfigurable, network-enabled devices to increase flexibility and ease commissioning and maintenance. Such capability creates vulnerabilities. Devices may be remotely reprogrammed by a malicious actor to act in unintended ways, causing physical damage to mechanical equipment, infrastructure, and life and limb. In this paper, past examples of actual damage to cyber- physical systems are shown, threats posed by software-controlled Variable Frequency Drives (VFDs) are analyzed, and a small-scale version of an attack on ubiquitous VFD equipment is demonstrated.
Authors	Matthew Angle, Stuart Madnick, James L. Kirtley, Jr., Shaharyar Khan
Date Published	Jun 1, 2019
PDF Version	identifying-and-anticipating-cyber-attacks-ics.1.pdf (3.4 MiB)

Identifying and Anticipating Cyber Attacks that Could Cause Physical Damage to Industrial Control Systems

Comments