PLC-Blaster - A Worm Living Solely in the PLC
Explore the groundbreaking presentation on the first PLC-only worm targeting Siemens Simatic S7-1200 PLCs. Delve into the technical details of how this self-contained malware operates without external support, compromising PLCs and evading detection. Learn about the proprietary Siemens protocol, the implementation process, and the worm's ability to scan networks, infect other PLCs, and maintain parallel execution with original user programs. Discover the Command & Control server functionality, proxy capabilities, and anti-forensic measures employed. Gain insights into the infection process, memory requirements, and potential impacts on different PLC models. Examine the syllabus covering topics such as PLC operations, program organization, target discovery, protocol analysis, and security measures. Understand the broader implications for industrial control systems and explore potential improvements and recommendations for enhancing PLC security across various vendors.