FieldFuzz: Stateful Fuzzing of Proprietary Industrial Controllers using Injected Ghosts. (arXiv:2204.13499v2 [cs.CR] UPDATED)

With the advent of the fourth industrial revolution, networked industrial
Programmable Logic Controllers (PLCs) have been introduced for critical
infrastructure control. A number of recent discoveries of exploitable
vulnerabilities in third-party libraries in such devices has raised concerns
about their supply chain security. Supply chain security verification of
software used in this context is challenging due to the proprietary nature of
the platforms, and the difficulty of their runtime introspection. In
particular, network-based fuzzing is often the only way to …

controllers fuzzing industrial