{"id":"https://openalex.org/W2913215638","doi":"https://doi.org/10.5220/0005330101370142","title":"ICS/SCADA Security - Analysis of a Beckhoff CX5020 PLC","display_name":"ICS/SCADA Security - Analysis of a Beckhoff CX5020 PLC","publication_year":2015,"publication_date":"2015-01-01","ids":{"openalex":"https://openalex.org/W2913215638","doi":"https://doi.org/10.5220/0005330101370142","mag":"2913215638"},"language":"en","primary_location":{"id":"doi:10.5220/0005330101370142","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0005330101370142","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.5220/0005330101370142","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014242094","display_name":"Gregor Bonney","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gregor Bonney","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078683649","display_name":"Hans Hoefken","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hans Hoefken","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038517246","display_name":"Benedikt Paffen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Benedikt Paffen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5037366086","display_name":"Marko Schuba","orcid":"https://orcid.org/0000-0002-3302-3060"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marko Schuba","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4828,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.64428312,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"137","last_page":"142"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9883999824523926,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9873999953269958,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.9697464108467102},{"id":"https://openalex.org/keywords/programmable-logic-controller","display_name":"Programmable logic controller","score":0.7655637264251709},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.634442925453186},{"id":"https://openalex.org/keywords/control-system-security","display_name":"Control system security","score":0.6296920776367188},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.5806068181991577},{"id":"https://openalex.org/keywords/ethernet","display_name":"Ethernet","score":0.5642141103744507},{"id":"https://openalex.org/keywords/remote-monitoring-and-control","display_name":"Remote monitoring and control","score":0.5301604866981506},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5282769799232483},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4981269836425781},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.47245410084724426},{"id":"https://openalex.org/keywords/supervisory-control","display_name":"Supervisory control","score":0.44876596331596375},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.40291741490364075},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3679932951927185},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3567039966583252},{"id":"https://openalex.org/keywords/control-system","display_name":"Control system","score":0.3559480309486389},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2545401155948639},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.11594447493553162},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.09871840476989746},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.0937754213809967},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.08179566264152527}],"concepts":[{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.9697464108467102},{"id":"https://openalex.org/C37374048","wikidata":"https://www.wikidata.org/wiki/Q188674","display_name":"Programmable logic controller","level":2,"score":0.7655637264251709},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.634442925453186},{"id":"https://openalex.org/C172862783","wikidata":"https://www.wikidata.org/wiki/Q5165888","display_name":"Control system security","level":5,"score":0.6296920776367188},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.5806068181991577},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.5642141103744507},{"id":"https://openalex.org/C33846599","wikidata":"https://www.wikidata.org/wiki/Q7312160","display_name":"Remote monitoring and control","level":3,"score":0.5301604866981506},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5282769799232483},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4981269836425781},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.47245410084724426},{"id":"https://openalex.org/C92991967","wikidata":"https://www.wikidata.org/wiki/Q7644329","display_name":"Supervisory control","level":3,"score":0.44876596331596375},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.40291741490364075},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3679932951927185},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3567039966583252},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.3559480309486389},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2545401155948639},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.11594447493553162},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.09871840476989746},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.0937754213809967},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.08179566264152527},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.5220/0005330101370142","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0005330101370142","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.5220/0005330101370142","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0005330101370142","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6399999856948853}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2183278624","https://openalex.org/W2970754664","https://openalex.org/W2545311377","https://openalex.org/W2768165469","https://openalex.org/W1577831524","https://openalex.org/W4256621493","https://openalex.org/W2614996178","https://openalex.org/W4312858719","https://openalex.org/W2943911154","https://openalex.org/W2401316927"],"abstract_inverted_index":{"A":[0],"secure":[1],"and":[2,11,16,27,96,125,137,171],"reliable":[3],"critical":[4],"infrastructure":[5],"is":[6,36,63,78,86,92,105,189],"a":[7,20,46,64,79,98,106,180],"concern":[8],"of":[9,22,49,51,58,133,159],"industry":[10],"governments.":[12],"SCADA":[13],"systems\r\n\r\n(Supervisory":[14],"Control":[15,25],"Data":[17],"Acquisition)":[18],"are":[19],"subgroup":[21],"ICS":[23,187],"(Industrial":[24],"Systems)":[26],"known\r\n\r\nto":[28],"be":[29,179],"well":[30],"interconnected":[31],"with":[32],"other":[33],"networks.":[34],"It":[35,91],"not":[37,70,155,177],"uncommon":[38],"to":[39,140,143,165],"use":[40,120],"public":[41],"networks":[42],"as":[43],"transport":[44],"route\r\n\r\nbut":[45],"rising":[47],"number":[48],"incidents":[50],"industrial":[52],"control":[53,144],"systems":[54,124,188],"shows":[55,138],"the":[56,116,145,148],"danger":[57],"excessive":[59],"crosslinking.\r\n\r\nBeckhoff":[60],"Automation":[61],"GmbH":[62],"German":[65],"automation":[66],"manufacturer":[67],"that":[68,85,119,163,185],"did":[69],"have":[71,113],"bad":[72],"press":[73],"so":[74],"far.":[75],"The\r\n\r\nBeckhoff":[76],"CX5020":[77,135],"typical":[80],"PLC":[81,136,146],"(Programmable":[82],"Logic":[83],"Controller)":[84],"used":[87],"in":[88],"today\u00e2\u0080\u0099s":[89],"SCADA\r\n\r\nsystems.":[90],"cross-linked":[93],"through":[94],"Ethernet":[95],"running":[97],"customized":[99],"Windows":[100],"CE":[101],"6.0,":[102],"therefore":[103],"the\r\n\r\nCX5020":[104],"good":[107,181],"representative":[108],"for":[109],"modern":[110],"PLCs":[111],"which":[112],"emerged":[114],"within":[115],"last":[117],"years":[118],"de\r\n\r\nfacto":[121],"standard":[122,127,166],"operation":[123,149],"open":[126],"communication":[128],"protocols.":[129],"This":[130],"paper":[131],"presents\r\n\r\nvulnerabilities":[132],"Beckhoff\u00e2\u0080\u0099s":[134],"ways":[139],"achieve":[141],"rights":[142],"program\r\n\r\nand":[147],"system":[150],"itself.":[151],"These":[152],"vulnerabilities":[153],"do":[154],"need":[156],"in-depth":[157],"knowledge":[158],"penetration":[160],"testing,\r\n\r\nthey":[161],"demonstrate":[162],"switching":[164],"platforms":[167],"brings":[168],"hidden":[169],"features":[170],"encapsulating":[172],"SCADA\r\n\r\nprotocols":[173],"into":[174],"TCP/IP":[175],"might":[176],"always":[178],"idea":[182],"\u00e2\u0080\u0093":[183],"underlining":[184],"securing":[186],"still":[190],"a\r\n\r\nchallenging":[191],"topic.":[192]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2019-02-21T00:00:00"}