Deconstructive Take-Over of Mitsubishi Electric Ecosystems
summary
Covers the Mitsubishi Electric industrial control system (ICS) communication protocol, explaining flaws found in its identity authentication that allow takeover of Mitsubishi PLC assets across the product series. Describes demonstrated risks including potential physical damage in critical sectors and provides practical detection and mitigation strategies for those protocols.
AI-written summary · about
chapters (20)
- 0:00Start
- 2:22Outline
- 4:05Mitsubishi Ecosystem - Scope
- 5:19Mitsubishi PLCs Usage
- 6:33Reviewed Mitsubishi Vulnerabilities
- 7:50Modern ICS/SCADA Ecosystems Overview
- 10:44Before Dissecting
- 11:19How to Compromise Mitsubishi Ecosystems
- 11:55MELSOFT vs. SLMP
- 13:38Melsoft Authentication
- 16:39Reverse Engineering GxWork2/3 (Cont.)
- 24:50Making a Protocol Analysis Tool
- 25:22Handshake Overview - Overwriting the PLC Program
- 31:36The Potential Impact of Attacks Using the MELSOFT Protocol
- 32:38Potential Impact of Attacks Using the MELSOFT Protocol (Cont.) • Remote Run/Stop to Interrupt the Process
- 33:09MITRE ATT&CK® Matrix for Industrial Control Systems
- 33:42Take-over The ICS Environment Smart Factory
- 34:50Vendor Perspective vs. Security Researcher Perspective
- 37:34Immediate Actions
- 39:07Within 3 Months Actions
related talks
40mHacking Mitsubishi PLC Without Access To Firmware
58mIndustrial Control Systems : Pentesting PLCs 101 (Part 1/2)
51mIndustrial Control Systems : Pentesting PLCs 101 (Part 2/2)
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
33mIndustroyer: biggest threat to industrial control systems since Stuxnet
39mIn-Field Emulation & Fuzzing of PLCs to Uncover the Next Zero-Day in Industrial Control Systems
50mJoin the Mission to Strengthen the Industrial Ecosystem
16mHoney, I Hacked The SCADA! : Industrial CONTROLLED Systems!