Hacking PLCs and Causing Havoc on Critical Infrastructures

Architecture and Background

Programmable Logic Controllers (PLCs) are devices used on a variety of industrial plants, from small factories to critical infrastructures like nuclear power plants, dams and wastewater systems.

Vulnerability Analysis

Although PLCs were made robust to sustain tough environments, little care was taken to raise defenses against potential cyber threats. As a consequence, threats started pouring in and causing havoc.

Exploitation and Demonstrations

During this presentation I will talk about the architecture of a PLC and how it can be p0wned.

Remediation and Defensive Strategies

There will be some live demonstration attacks against 3 different brands of PLCs (if the demo demons allow it, if not I will just show a video). Additionally, I will demonstrate two vulnerabilities I recently discovered, affecting the Rockwell MicroLogix 1400 series and the Schneider Modicon M221 controllers.