In 2010 the infamous Stuxnet worm has drawn the attention of security experts around the world to industrial control systems (ICS). Even if problems are well known there are only few solutions. In this project we aim to develop an infrastructure that allows us to develop and test such security solutions. We will develop a batch configurable simulation infrastructure that communications via Modbus / PROFINET and simulates simple programmable automation controllers (PAC). In addition we will develop a paket capturing tool that allows us to sniff the traffic in the network. The capturing tool will be implemented as a sensor network, what means that there can be various sensors distributed in the network which report back to an analysis server. If this is up and running and we still got time left we will do a vulnerability analysis of the protocol and implement testcases to demonstrate the problems. As a goody we will port this system to Raspberry Pis if we can get our hands on some. Schließen

https://media.blackhat.com/bh-us-11/Beresford/BH_US11_Beresford_S7_PLCs_WP.pdf http://en.wikipedia.org/wiki/Modbus http://www.modbus.org http://libmodbus.org/site_media/html/libmodbus.html http://www.profibus.com http://www.allthingsprofinet.com Schließen