#HITB2022SIN #COMMSEC Faking At Level 1: How Digital Twins Save Your PLCs

OT Foundations and Risk

Thomas, an embedded IoT security researcher, explains operational technology spanning PLCs, RTUs, HMIs, and SCADA across Purdue model levels. Unlike IT pen tests, OT assessments risk physical process disruption, lengthy recovery, and rare maintenance windows where even port scans can reboot hundreds of PLCs.

IT Versus OT Constraints

OT networks run low-bandwidth, hard real-time control traffic. A brief failure can halt factories for weeks, especially in chemical plants. Automated scanners are unsafe; testers must coordinate closely with plant operators and log all network activity.

Firmware Digital Twins

The talk focuses on firmware digital twins: emulated copies of device operating systems that run without physical hardware. This enables security research on level-one controllers when buying or fuzzing real PLCs is impractical, though emulation introduces fidelity tradeoffs vendors are still addressing.

Faking Level 1 for Safer Testing

By simulating PLCs and related level-one devices, teams can explore vulnerabilities and defensive controls without touching live production equipment. Thomas positions digital twins as a bridge between OT security assessment needs and the safety requirements of industrial environments.