Snakes and Ladder Logic: PLC-VBS, a PLC Control Logic Vulnerability Discovery Tool. (arXiv:2206.06669v2 [cs.CR] UPDATED)

Cyber security risk assessments provide a pivotal starting point towards the
understanding of existing risk exposure, through which suitable mitigation
strategies can be formed. Where risk is viewed as a product of threat,
vulnerability, and impact, understanding each element is of equal importance.
This can be a challenge in Industrial Control System (ICS) environments, where
adopted technologies are typically not only bespoke, but interact directly with
the physical world. To date, existing vulnerability identification has focused
on traditional vulnerability categories. …

control discovery logic plc tool vbs vulnerability vulnerability discovery