skip to main content
DOE Patents title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: PLC backplane analyzer for field forensics and intrusion detection

Abstract

The various technologies presented herein relate to the determination of unexpected and/or malicious activity occurring between components communicatively coupled across a backplane. Control data, etc., can be intercepted at a backplane where the backplane facilitates communication between a controller and at least one device in an automation process. During interception of the control data, etc., a copy of the control data can be made, e.g., the original control data can be replicated to generate a copy of the original control data. The original control data can continue on to its destination, while the control data copy can be forwarded to an analyzer system to determine whether the control data contains a data anomaly. The content of the copy of the control data can be compared with a previously captured baseline data content, where the baseline data can be captured for a same operational state as the subsequently captured control data.

Inventors:
; ; ; ; ; ; ; ; ;
Issue Date:
Research Org.:
Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)
Sponsoring Org.:
USDOE
OSTI Identifier:
1179220
Patent Number(s):
9,032,522
Application Number:
13/947,887
Assignee:
Sandia Corporation (Albuquerque, NM)
DOE Contract Number:  
AC04-94AL85000
Resource Type:
Patent
Resource Relation:
Patent File Date: 2013 Jul 22
Country of Publication:
United States
Language:
English
Subject:
99 GENERAL AND MISCELLANEOUS; 97 MATHEMATICS AND COMPUTING

Citation Formats

Mulder, John, Schwartz, Moses Daniel, Berg, Michael, Van Houten, Jonathan Roger, Urrea, Jorge Mario, King, Michael Aaron, Clements, Abraham Anthony, Trent, Jason, Depoy, Jennifer M, and Jacob, Joshua. PLC backplane analyzer for field forensics and intrusion detection. United States: N. p., 2015. Web.
Mulder, John, Schwartz, Moses Daniel, Berg, Michael, Van Houten, Jonathan Roger, Urrea, Jorge Mario, King, Michael Aaron, Clements, Abraham Anthony, Trent, Jason, Depoy, Jennifer M, & Jacob, Joshua. PLC backplane analyzer for field forensics and intrusion detection. United States.
Mulder, John, Schwartz, Moses Daniel, Berg, Michael, Van Houten, Jonathan Roger, Urrea, Jorge Mario, King, Michael Aaron, Clements, Abraham Anthony, Trent, Jason, Depoy, Jennifer M, and Jacob, Joshua. Tue . "PLC backplane analyzer for field forensics and intrusion detection". United States. https://www.osti.gov/servlets/purl/1179220.
@article{osti_1179220,
title = {PLC backplane analyzer for field forensics and intrusion detection},
author = {Mulder, John and Schwartz, Moses Daniel and Berg, Michael and Van Houten, Jonathan Roger and Urrea, Jorge Mario and King, Michael Aaron and Clements, Abraham Anthony and Trent, Jason and Depoy, Jennifer M and Jacob, Joshua},
abstractNote = {The various technologies presented herein relate to the determination of unexpected and/or malicious activity occurring between components communicatively coupled across a backplane. Control data, etc., can be intercepted at a backplane where the backplane facilitates communication between a controller and at least one device in an automation process. During interception of the control data, etc., a copy of the control data can be made, e.g., the original control data can be replicated to generate a copy of the original control data. The original control data can continue on to its destination, while the control data copy can be forwarded to an analyzer system to determine whether the control data contains a data anomaly. The content of the copy of the control data can be compared with a previously captured baseline data content, where the baseline data can be captured for a same operational state as the subsequently captured control data.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2015},
month = {5}
}

Patent:

Save / Share:

Works referenced in this record:

The real story of stuxnet
journal, March 2013