{"id":"https://openalex.org/W595382476","doi":null,"title":"Creating a Weapon of Mass Disruption: Attacking Programmable Logic Controllers","display_name":"Creating a Weapon of Mass Disruption: Attacking Programmable Logic Controllers","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W595382476","mag":"595382476"},"language":"en","primary_location":{"id":"pmh:oai:ntnuopen.ntnu.no:11250/253242","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/11250/253242","pdf_url":null,"source":{"id":"https://openalex.org/S7407064446","display_name":"NORA - Norwegian Open Research Archives","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"124","raw_type":"info:eu-repo/semantics/masterThesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/11250/253242","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023509839","display_name":"Morten Gjendemsj\u00f8","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Morten Gjendemsj\u00f8","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5023509839"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13344","display_name":"Industrial Automation and Control Systems","score":0.5590999722480774,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13344","display_name":"Industrial Automation and Control Systems","score":0.5590999722480774,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.3978999853134155,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00860000029206276,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/programmable-logic-controller","display_name":"programmable logic controller","score":0.9869999885559082},{"id":"https://openalex.org/keywords/industrial-cybersecurity","display_name":"industrial cybersecurity","score":0.8220000267028809},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.8799999952316284},{"id":"https://openalex.org/keywords/arbitrary-code-execution","display_name":"arbitrary code execution","score":0.8769999742507935}],"concepts":[{"id":"https://openalex.org/C37374048","wikidata":"https://www.wikidata.org/wiki/Q188674","display_name":"Programmable logic controller","level":2,"score":0.7353969216346741},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7160799503326416},{"id":"https://openalex.org/C172862783","wikidata":"https://www.wikidata.org/wiki/Q5165888","display_name":"Control system security","level":5,"score":0.6709643602371216},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.5777996778488159},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5579904317855835},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.48736411333084106},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4632071256637573},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.43762609362602234},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.43644893169403076},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41148796677589417},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.27970415353775024},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.2568882405757904},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.2530778646469116},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.1201522946357727},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.1069713830947876},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10585758090019226},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:ntnuopen.ntnu.no:11250/253242","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/11250/253242","pdf_url":null,"source":{"id":"https://openalex.org/S7407064446","display_name":"NORA - Norwegian Open Research Archives","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"124","raw_type":"info:eu-repo/semantics/masterThesis"},{"id":"mag:595382476","doi":null,"is_oa":false,"landing_page_url":"https://ntnuopen.ntnu.no/ntnu-xmlui/handle/11250/253242","pdf_url":null,"source":{"id":"https://openalex.org/S4363605477","display_name":"124","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"other"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"124","raw_type":null}],"best_oa_location":{"id":"pmh:oai:ntnuopen.ntnu.no:11250/253242","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/11250/253242","pdf_url":null,"source":{"id":"https://openalex.org/S7407064446","display_name":"NORA - Norwegian Open Research Archives","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"124","raw_type":"info:eu-repo/semantics/masterThesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W129397930","https://openalex.org/W152620456","https://openalex.org/W197221213","https://openalex.org/W222785343","https://openalex.org/W563794187","https://openalex.org/W981357659","https://openalex.org/W1546161534","https://openalex.org/W1589528670","https://openalex.org/W1601212787","https://openalex.org/W1782472225","https://openalex.org/W1883982708","https://openalex.org/W1992352638","https://openalex.org/W2002578057","https://openalex.org/W2006267758","https://openalex.org/W2048959175","https://openalex.org/W2060477118","https://openalex.org/W2092791342","https://openalex.org/W2102662195","https://openalex.org/W2116998925","https://openalex.org/W2120562931","https://openalex.org/W2132531706","https://openalex.org/W2140471436","https://openalex.org/W2171834277","https://openalex.org/W2292816469","https://openalex.org/W2610437899","https://openalex.org/W2619874920","https://openalex.org/W3109094737","https://openalex.org/W3130529786","https://openalex.org/W4235949046"],"related_works":["https://openalex.org/W7215111046","https://openalex.org/W3007936791","https://openalex.org/W2966492358","https://openalex.org/W2966940350","https://openalex.org/W4327945725","https://openalex.org/W3042691215","https://openalex.org/W4403675150","https://openalex.org/W6986446673","https://openalex.org/W6946127511","https://openalex.org/W2280904015"],"abstract_inverted_index":{"A":[0,135],"programmable":[1],"logic":[2],"controller":[3],"(PLC)":[4],"is":[5,90,112],"a":[6,23,200,225,235,242,251,290],"small":[7],"industrial":[8,82,105,339],"computer":[9],"made":[10],"to":[11,143,171,182,198,249,283],"withstand":[12],"the":[13,35,41,67,109,114,247,257,271,300,320,323,326],"harsh":[14],"environment":[15],"it":[16,89],"operates":[17],"in.":[18],"PLCs":[19,96,99],"were":[20],"designed":[21],"for":[22,81],"closed,":[24],"trusted":[25],"network":[26,310],"with":[27,309,316],"little":[28],"emphasis":[29],"on":[30,224],"security.":[31],"Since":[32],"their":[33,268],"introduction,":[34],"automation":[36,47,68],"world":[37,110],"has":[38,48],"changed,":[39],"and":[40,46,64,111,126,130,132,173,186,192,212,267],"line":[42],"between":[43],"traditional":[44],"IT":[45],"slowly":[49],"faded":[50],"away.":[51],"By":[52],"integrating":[53],"well":[54],"known,":[55],"low":[56],"cost,":[57],"technology":[58],"such":[59,118],"as":[60,119],"commodity":[61],"operating":[62],"systems":[63,117],"TCP/IP":[65],"into":[66],"realm,":[69],"new":[70,236],"threats":[71],"are":[72,97,100,222,264],"emerging.":[73],"Security":[74],"by":[75,241],"obscurity":[76],"was":[77,86],"long":[78],"deemed":[79],"sufficient":[80],"networks.":[83],"If":[84],"this":[85,188,207],"ever":[87],"true,":[88],"not":[91],"anymore,especially":[92],"when":[93],"considering":[94],"where":[95],"deployed;":[98],"part":[101],"of":[102,116,150,215,292,322],"virtually":[103],"every":[104],"control":[106],"system":[107,137],"in":[108,146,205,217,289,342],"at":[113,154],"heart":[115],"power":[120],"production":[121],"(including":[122],"nuclear),":[123],"pipelines,":[124],"oil":[125],"gas":[127],"refineries,":[128],"water":[129],"waste,":[131],"weapon":[133],"systems.":[134],"compromised":[136],"could":[138],"mean":[139],"financial":[140,347],"loss,":[141],"damage":[142],"equipment":[144],"or":[145,177,336],"some":[147],"cases,":[148],"loss":[149],"life.This":[151],"thesis":[152,189,208,304],"looks":[153],"PLC":[155,203],"security":[156,204,216,220,232],"from":[157,273],"an":[158,168,295,307,338],"attacker?s":[159],"perspective.":[160],"That":[161],"is,":[162],"given":[163],"logicalnetwork":[164],"access,":[165],"what":[166],"will":[167,175,341],"attacker":[169],"attempt":[170],"accomplish":[172],"how":[174],"he":[176],"she":[178],"proceed?":[179],"In":[180,319],"order":[181],"answer":[183],"these":[184],"questions,":[185],"more,":[187],"discusses":[190],"techniques":[191],"tools":[193],"that":[194,254,306],"can":[195,312,330],"be":[196],"used":[197,227],"compromise":[199],"PLC.":[201],"Studying":[202],"detail,":[206],"include":[209],"both":[210],"theoretical":[211],"practical":[213],"aspects":[214],"PLCs.":[218],"In-depth":[219],"tests":[221],"performed":[223],"widely":[226],"PLC;":[228],"uncovering":[229],"several":[230],"critical":[231],"vulnerabilities,":[233],"including":[234,259],"XML":[237],"parser":[238],"vulnerability":[239],"accompanied":[240],"zero":[243],"day":[244],"exploit":[245,296,328],"allowing":[246],"adversary":[248,308],"perform":[250,313],"DoS":[252],"attack":[253],"completely":[255],"disables":[256],"PLC,":[258],"communication":[260],"capabilities.":[261],"Other":[262],"exploits":[263,301],"also":[265],"developed":[266],"consequences":[269],"run":[270],"gamut":[272],"arbitrary":[274],"code":[275],"execution,":[276],"file":[277],"read/write":[278],"permissions,":[279],"installing":[280],"customized":[281],"firmware,":[282],"manipulating":[284],"actuators.":[285],"The":[286],"research":[287],"culminates":[288],"set":[291],"python":[293],"scripts,":[294],"suite,":[297,329],"implementing":[298],"all":[299],"developed.":[302],"This":[303],"shows":[305],"access":[311],"devastating":[314],"attacks":[315],"relative":[317],"ease.":[318],"hands":[321],"wrong":[324],"people,":[325],"weaponized":[327],"cause":[331],"tremendous":[332],"damage.":[333],"Shutting":[334],"down,":[335],"altering,":[337],"process":[340],"many":[343],"cases":[344],"have":[345],"severe":[346],"and/or":[348],"safety":[349],"consequences.":[350]},"counts_by_year":[{"year":2020,"cited_by_count":3},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":4}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}