首页|CORMAND2:A Deception Attack Against Industrial Robots

CORMAND2:A Deception Attack Against Industrial Robots

扫码查看
Industrial robots are becoming increasingly vulnerable to cyber incidents and attacks,particularly with the dawn of the Industrial Internet-of-Things(IIoT).To gain a comprehensive understanding of these cyber risks,vulnerabilities of industrial robots were analyzed empirically,using more than three million communication packets collected with testbeds of two ABB IRB120 robots and five other robots from var-ious original equipment manufacturers(OEMs).This analysis,guided by the confidentiality-integrity-availability(CIA)triad,uncovers robot vulnerabilities in three dimensions:confidentiality,integrity,and availability.These vulnerabilities were used to design Covering Robot Manipulation via Data Deception(CORMAND2),an automated cyber-physical attack against industrial robots.CORMAND2 manipulates robot operation while deceiving the Supervisory Control and Data Acquisition(SCADA)system that the robot is operating normally by modifying the robot's movement data and data deception.CORMAND2 and its capability of degrading the manufacturing was validated experimentally using the aforementioned seven robots from six different OEMs.CORMAND2 unveils the limitations of existing anomaly detection systems,more specifically the assumption of the authenticity of SCADA-received movement data,to which we propose mitigations for.

Industrial robotsVulnerability analysisDeception attacksDefenses

Hongyi Pu、Liang He、Peng Cheng、Jiming Chen、Youxian Sun

展开 >

College of Control Science and Engineering,Zhejiang University,Hangzhou 310000,China

Department of Computer Science and Engineering,University of Colorado Denver,Denver,CO 999039,USA

Science and Technology Innovation Program(2030)

2018AAA0101605

2024

工程(英文)

工程(英文)

CSTPCDEI
ISSN:2095-8099
年,卷(期):2024.32(1)
  • 51