In-Field Emulation & Fuzzing of PLCs to Uncover the Next Zero-Day in Industrial Control Systems

on YouTube ↗39m

" summary

Covers techniques for emulating and fuzzing programmable logic controllers (PLCs) in the field to find zero-day vulnerabilities in Industrial Control Systems (ICS). Describes using PLC firmware and protocol-level emulation plus fuzzing tools to go beyond network-layer tests and exercise control operations and device internals to surface hidden flaws in ICS deployments.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 4:27black hat Industrial Control Systems - Security
3. 6:53black hat Codesys Runtime
4. 15:39black hat Fuzzing/Emulation

" related talks

• 58mIndustrial Control Systems : Pentesting PLCs 101 (Part 1/2)Arnaud Soullie · Black Hat Europe 2014
• 51mIndustrial Control Systems : Pentesting PLCs 101 (Part 2/2)Arnaud Soullie · Black Hat Europe 2014
• 29mFuzzing and Breaking Security Functions of SIMATIC PLCsGao Jian · Black Hat Europe 2022
• 30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADAMars Cheng, YenTing Lee · FIRSTCON21 Virtual Edition 2.0
• 40mHacking Mitsubishi PLC Without Access To FirmwareAnton Dorfman · Nullcon Goa 2023
• 19mIoT Security Exposed: From PLC Flaws to the Imperative of SBOMZahra Khani · IoTSF Conference 2024
• 21mOops, It Halted Again: Exploiting PLC Memory for Fun and Profit in Industrial Control...Irfan Ahmed, Wooyeon Jo · 19th USENIX WOOT Conference on Offensive Technologies (WOOT '25)
• 50mDead Man’s PLC: Ransoming the Physical World via Operational TechnologyRic Derbyshire, Charl van der Walt · RSA Conference 2024