Adversaries may modify or add a program on a controller to affect how it interacts with the physical process, peripheral devices and other hosts on the network. Modification to controller programs can be accomplished using a Program Download in addition to other types of program modification such as online edit and program append. Program modification encompasses the addition and modification of instructions and logic contained in Program Organization Units (POU) (Citation: IEC February 2013) and similar programming elements found on controllers. This can include, for example, adding new functions to a controller, modifying the logic in existing functions and making new calls from one function to another. Some programs may allow an adversary to interact directly with the native API of the controller to take advantage of obscure features or vulnerabilities.

Linked Issues

Issuelinks
Linktype Issue
is related to Techniques
is related to Distributed Control System (DCS) Controller
is related to Safety Controller
is related to Programmable Automation Controller (PAC)
is related to Programmable Logic Controller (PLC)
is blocked by Audit
is blocked by Code Signing
is blocked by Authorization Enforcement
is blocked by Detection of Modify Program
is blocked by Human User Authentication
Impressum German English