A4 Refereed article in a conference publication

Low-Cost Platform for Fault Injection Attacks on Industrial Programmable Logic Controllers




AuthorsJost, Sören; Stöttinger, Marc; Kanth, Rajeev

EditorsN/A

Conference nameMediterranean Conference on Embedded Computing

PublisherIEEE

Publication year2025

JournalMediterranean Conference on Embedded Computing

Book title 2025 14th Mediterranean Conference on Embedded Computing (MECO)

Volume14

ISBN979-8-3315-1342-9

eISBN979-8-3315-1341-2

ISSN2377-5475

eISSN2637-9511

DOIhttps://doi.org/10.1109/MECO66322.2025.11049117

Web address https://doi.org/10.1109/meco66322.2025.11049117


Abstract

Attacks such as Stuxnet have shown that programmable logic controllers (PLCs) used in supervisory control and data acquisition (SCADA) systems are vulnerable to attack. Over the last decade, research in cybersecurity related to these systems has been increasing significantly. Most of this research focuses on the context of embedded security and the exploitation of software-based vulnerabilities through fuzzing methods. However, in the context of implementation security of embedded devices, implementation attacks such as Fault Injection Attacks (FIA) are important as they allow attackers to bypass functionally correctly implemented security mechanisms. Although hardware attacks such as Fault Injection Attacks (FIA) have been an active research topic for several decades, this type of attack has been studied little or not at all in the context of SCADA systems or PLCs. This paper investigates the practical implementation of a voltage-based fault injection attack on a PLC with a low-cost crowbar tool to evaluate the potential risk and impact on compromising security applications in an Operational Technology (OT) domain running on a PLC.


Funding information in the publication
We express our sincere gratitude to Business Finland for their funding of the AIQUSEC project (BF/2828/31/2023) at Savonia University of Applied Sciences, Finland for providing the financial support.


Last updated on 2025-30-07 at 08:45