Threat Analysis of Steganographic and Covert Communication in Nuclear I&C Systems
- Steganographic and covert communication is increasingly used for hiding attacks. Often information hiding is used by attackers in advanced persistent threats in order to operate without being noticed. Attackers might use it to hide data exfiltration or control channels for persistent malware. The paper analyzes potential threats to operational technology by investigating different communication protocols towards their suitability as cover channels. Using a generalized network architecture modelSteganographic and covert communication is increasingly used for hiding attacks. Often information hiding is used by attackers in advanced persistent threats in order to operate without being noticed. Attackers might use it to hide data exfiltration or control channels for persistent malware. The paper analyzes potential threats to operational technology by investigating different communication protocols towards their suitability as cover channels. Using a generalized network architecture model and the communication flows of nuclear power plants, the attack potential using information hiding is exemplary assessed. An example for a supply chain attack for command injection is given on the foundation of the OPC UA protocol and an off-theshelf programmable logic controller. Subsequently, recommendations for a strategic and operational preparation for operators towards the prevention and detection of information hiding attacks are derived.…
Author: | Mario Hildebrandt, Robert Altschaffel, Kevin Lamshöft, Mathias Lange, Martin Szemkus, Tom Neubert, Claus Vielhauer, Yongjian Ding, Jana Dittmann |
---|---|
URL: | https://www.researchgate.net/publication/350966454_Threat_Analysis_of_Steganographic_and_Covert_Communication_in_Nuclear_IC_Systems |
Parent Title (German): | Konferenz: International Conference on Nuclear Security: Sustaining and Strengthening Efforts (ICONS), Vienna, Austria, 2020/ Konferenzband: International Conference on Nuclear Security: Sustaining and Strengthening Efforts |
Publisher: | IAEA |
Place of publication: | Vienna, Austria |
Document Type: | Conference Proceeding |
Language: | English |
Year of Publishing: | 2020 |
Date of Publication (online): | 2023/12/20 |
Release Date: | 2024/01/04 |
Page Number: | 14 |
Note: | Band 10 |
Institutes: | Fachbereich Informatik und Medien |
Licence (German): | ![]() |