Active Scanning in the Industrial Control Systems

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26220%2F21%3APU142412" target="_blank" >RIV/00216305:26220/21:PU142412 - isvavai.cz</a>
Result on the web
<a href="https://ieeexplore.ieee.org/document/9644373/" target="_blank" >https://ieeexplore.ieee.org/document/9644373/</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1109/ISCSIC54682.2021.00049" target="_blank" >10.1109/ISCSIC54682.2021.00049</a>

Result language
angličtina
Original language name
Active Scanning in the Industrial Control Systems
Original language description
Industrial control systems (ICS) networks have faced challenges in incident detection over the last few years. One of the issues harming ICS networks is the active scanning of such structures. Active scanning can be used in two different key scenarios: either by an attacker causing network damage or by the network owner to explore network hosts and visualize network architecture; in both cases, it can affect ICS network traffic. This paper aims to demonstrate active scanning using two tools (Nmap, Zmap) from the penetration tester's perspective. The penetration tester operation was described in the context of the impact on the failure or the delay of communication in the network. As a part of this work, an industrial testbed was created to analyse the impact of the scanning. While scanning with the Zmap tool, there was a complete loss of communication between the device and the testbed network. On the other hand, the Nmap tool displayed a delay and an occasional network outage. The article then described and visualized the delay and outage data. These results clearly show that it is not appropriate to use active scanners in industrial networks, as they can have a fatal impact on the entire network's communication.
Czech name
—
Czech description
—

Project
<a href="/en/project/FV40366" target="_blank" >FV40366: Data Monitoring to Increase the Reliability of Smart Factory Processes</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2021
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
2021 International Symposium on Computer Science and Intelligent Control (ISCSIC)
ISBN
978-1-6654-1627-6
ISSN
—
e-ISSN
—
Number of pages
6
Pages from-to
1-6
Publisher name
IEEE CPS
Place of publication
Rome, Italy
Event location
Stockholm
Event date
Aug 13, 2021
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
000803928000038

Similar results(10)