TY - GEN A1 - Lehniger, Kai A1 - Schölzel, Mario A1 - Jelonek, Jonas A1 - Tabatt, Peter A1 - Aftowicz, Marcin A1 - Langendörfer, Peter T1 - Combination of ROP Defense Mechanisms for Better Safety and Security in Embedded Systems T2 - 25th Euromicro Conference on Digital Systems Design (DSD 2022), Maspalomas, Spain, 31 August 2022 - 02 September 2022 Y1 - 2022 SN - 978-1-6654-7404-7 SN - 978-1-6654-7405-4 U6 - https://doi.org/10.1109/DSD57027.2022.00070 SN - 2771-2508 ER - TY - GEN A1 - Tabatt, Peter A1 - Jelonek, Jonas A1 - Schölzel, Mario A1 - Lehniger, Kai A1 - Langendörfer, Peter T1 - Code Mutation as a Mean Against ROP Attacks for Embedded Systems T2 - 11th Mediterranean Conference on Embedded Computing (MECO 2022), Budva, Montenegro, 07-10 June 2022 Y1 - 2022 SN - 978-1-6654-6828-2 SN - 978-1-6654-6827-5 U6 - https://doi.org/10.1109/MECO55406.2022.9797185 SN - 2637-9511 ER - TY - GEN A1 - Alsabbagh, Wael A1 - Langendörfer, Peter T1 - A Flashback on Control Logic Injection Attacks against Programmable Logic Controllers T2 - Automation N2 - Programmable logic controllers (PLCs) make up a substantial part of critical infrastructures (CIs) and industrial control systems (ICSs). They are programmed with a control logic that defines how to drive and operate critical processes such as nuclear power plants, petrochemical factories, water treatment systems, and other facilities. Unfortunately, these devices are not fully secure and are prone to malicious threats, especially those exploiting vulnerabilities in the control logic of PLCs. Such threats are known as control logic injection attacks. They mainly aim at sabotaging physical processes controlled by exposed PLCs, causing catastrophic damage to target systems as shown by Stuxnet. Looking back over the last decade, many research endeavors exploring and discussing these threats have been published. In this article, we present a flashback on the recent works related to control logic injection attacks against PLCs. To this end, we provide the security research community with a new systematization based on the attacker techniques under three main attack scenarios. For each study presented in this work, we overview the attack strategies, tools, security goals, infected devices, and underlying vulnerabilities. Based on our analysis, we highlight the current security challenges in protecting PLCs from such severe attacks and suggest security recommendations for future research directions. KW - industrial control system KW - programmable logic controller KW - control logic injection attack KW - program injection KW - program modification Y1 - 2022 U6 - https://doi.org/10.3390/automation3040030 SN - 2673-4052 VL - 3 IS - 4 SP - 596 EP - 621 ER - TY - GEN A1 - Alsabbagh, Wael A1 - Langendörfer, Peter T1 - A New Injection Threat on S7-1500 PLCs - Disrupting the Physical Process Offline T2 - IEEE Open Journal of the Industrial Electronics Society Y1 - 2022 U6 - https://doi.org/10.1109/OJIES.2022.3151528 SN - 2644-1284 IS - 3 SP - 146 EP - 162 ER - TY - GEN A1 - Kabin, Ievgen A1 - Dyka, Zoya A1 - Langendörfer, Peter T1 - Atomicity and Regularity Principles do not Ensure Full Resistance of ECC Designs against Single-Trace Attacks T2 - Sensors Y1 - 2022 U6 - https://doi.org/10.3390/s22083083 SN - 1424-8220 VL - 22 IS - 8 ER - TY - GEN A1 - Lehniger, Kai A1 - Saad, Abdelaziz A1 - Langendörfer, Peter T1 - Finding Gadgets in Incremental Code Updates for Return-Oriented Programming Attacks on Resource-Constrained Devices T2 - Annals of Telecommunications Y1 - 2022 U6 - https://doi.org/10.1007/s12243-022-00917-8 SN - 0003-4347 VL - 78 SP - 209 EP - 229 ER - TY - GEN A1 - Martin, Cristian A1 - Langendörfer, Peter A1 - Zarrin, Pouya Soltani A1 - Díaz, Manuel A1 - Rubio, Bartolomé T1 - Kafka-ML: Connecting the Data Stream with ML/AI Frameworks T2 - Future Generation Computer Systems Y1 - 2022 U6 - https://doi.org/10.1016/j.future.2021.07.037 SN - 0167-739X VL - 126 SP - 15 EP - 33 ER - TY - GEN A1 - Amatov, Batyi A1 - Lehniger, Kai A1 - Langendörfer, Peter T1 - Return-Oriented Programming Gadget Catalog for the Xtensa Architecture T2 - 6th International Workshop on Security, Privacy and Trust in the Internet of Things (SPT-IoT 2022) Y1 - 2022 SN - 978-1-6654-1647-4 SN - 978-1-6654-1648-1 U6 - https://doi.org/10.1109/PerComWorkshops53856.2022.9767489 ER - TY - GEN A1 - Lang, Patrick A1 - Haddadi Esfahani, Ali A1 - Dyka, Zoya A1 - Langendörfer, Peter ED - Rehman, Masood Ur T1 - FPGA-based Realtime Detection of Freezing of Gait of Parkinson Patients T2 - Body Area Networks. Smart IoT and Big Data for Intelligent Health Management : 16th EAI International Conference, BODYNETS 2021, Virtual Event, October 25-26, 2021, Proceedings Y1 - 2022 SN - 978-3-030-95593-9 SN - 978-3-030-95592-2 U6 - https://doi.org/10.1007/978-3-030-95593-9_9 SN - 1867-8211 SN - 1867-822X SP - 101 EP - 111 PB - Springer International Publishing ER - TY - GEN A1 - Alsabbagh, Wael A1 - Langendörfer, Peter T1 - No Need to be Online to Attack - Exploiting S7-1500 PLCs by Time-Of-Day Block T2 - Proc. 28th International Conference on Information, Communication and Automation Technologies (ICAT 2022), arajevo, Bosnia and Herzegovina, 16-18 June 2022 Y1 - 2022 SN - 978-1-6654-6692-9 SN - 978-1-6654-6691-2 U6 - https://doi.org/10.1109/ICAT54566.2022.9811147 SN - 2643-1858 ER - TY - GEN A1 - Dyka, Zoya A1 - Kabin, Ievgen A1 - Brzozowski, Marcin A1 - Panic, Goran A1 - Calligaro, Cristiano A1 - Krstic, Milos A1 - Langendörfer, Peter T1 - On the SCA Resistance of Crypto IP Cores T2 - 23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022 Y1 - 2022 SN - 978-1-6654-5707-1 SN - 978-1-6654-5708-8 U6 - https://doi.org/10.1109/LATS57337.2022.9937007 SN - 2373-0862 ER - TY - GEN A1 - Shamilyan, Oxana A1 - Kabin, Ievgen A1 - Dyka, Zoya A1 - Langendörfer, Peter T1 - Distributed Artificial Intelligence as a Means to Achieve Self-X-Functions for Increasing Resilience: the First Steps T2 - 11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022 Y1 - 2022 SN - 978-1-6654-6828-2 SN - 978-1-6654-6827-5 U6 - https://doi.org/10.1109/MECO55406.2022.9797193 SN - 2637-9511 ER - TY - GEN A1 - Aftowicz, Marcin A1 - Lehniger, Kai A1 - Langendörfer, Peter T1 - Scalable FPGA Hardware Accelerator for SVM Inference T2 - Proc. 10th International Conference on Cyber-Physical Systems and Internet-of-Things (CPS&IoT 2022) Y1 - 2022 SN - 978-1-6654-6828-2 SN - 978-1-6654-6827-5 U6 - https://doi.org/10.1109/MECO55406.2022.9797110 SN - 2637-9511 ER - TY - GEN A1 - Alsabbagh, Wael A1 - Langendörfer, Peter ED - Jasperneite, Jürgen ED - Lohweg, Volker T1 - A Remote Attack Tool on Siemens S7-300 Controllers: Practical Report T2 - Kommunikation und Bildverarbeitung in der Automation : Ausgewählte Beiträge der Jahreskolloquien KommA und BVAu 2020 Y1 - 2022 SN - 978-3-662-64282-5 SN - 978-3-662-64283-2 U6 - https://doi.org/10.1007/978-3-662-64283-2_1 SN - 2522-8579 SP - 3 EP - 21 PB - Springer Vieweg CY - Heidelberg ER - TY - GEN A1 - Lehniger, Kai A1 - Langendörfer, Peter T1 - Through the Window: On the Exploitability of Xtensa’s Register Window Overflow T2 - 32nd International Telecommunication Networks and Applications Conference (ITNAC 2022), Wellington, New Zealand, 30 November 2022 - 02 December 2022 Y1 - 2022 SN - 978-1-6654-7103-9 SN - 978-1-6654-7104-6 U6 - https://doi.org/10.1109/ITNAC55475.2022.9998407 SN - 2474-154X SP - 353 EP - 358 ER - TY - GEN A1 - Brzozowski, Marcin A1 - Langendörfer, Peter A1 - Casaca, Augusto A1 - Grilo, Antonio A1 - Diaz, Manuel A1 - Martín, Cristian A1 - Camacho, Jose A1 - Landi, Giada T1 - UNITE: Integrated IoT-Edge-Cloud Continuum T2 - 2022 IEEE 8th World Forum on Internet of Things (WF-IoT), Yokohama, 26 October 2022 - 11 November 2022 Japan Y1 - 2022 SN - 978-1-6654-9153-2 SN - 978-1-6654-9154-9 U6 - https://doi.org/10.1109/WF-IoT54382.2022.10152292 ER -