A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven

...In our presentation, we reverse-engineer the Siemens S7-1500 Software Controller PLC up to the communication protocol and show the violation of fundamental security principles. We show that substantial efforts have been put into obfuscating communication and modifying established cryptography primitives without increasing the effective security level....

By: Tom Dohrmann , Colin Finck

Full Abstract and Presentation Materials:
https://www.blackhat.com/eu-23/briefings/schedule/#a-decade-after-stuxnet-how-siemens-s-is-still-an-attackers-heaven-35096

attacker communication communication protocol controller cryptography engineer plc presentation principles protocol reverse security siemens software stuxnet