A system and method for detecting malicious re-programming of a plc in scada systems using time deception

摘要

A method for detecting malicious reprogramming of a Programmable Logic Controller (PLC) in a Superiority Control And Data Acquisition (SCADA) system, according to which a dedicated device is located on the communication network between the PLC and an engineering Workstation and the traffic between the PLC and the engineering Workstation is passively collected and checked using a TAP. An alert is generated upon detecting an unauthorized reprogramming in the checked traffic.