PLC Automation Software Version Comparison for Tamper Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing complexity and flexibility of automation software in automation devices make fault finding and detecting unauthorized changes or attacks challenging, posing risks to capital goods and human safety.
Innovation Solution
A system for analyzing automation software by comparing two versions of the software at different points in time, using analysis software that can be executed on a separate computer, forensic computer, or cloud computing, with features like write blockers, hash functions, and authentication to identify and protect copies of the software.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If automation software is made more flexible and complex to handle diverse automation tasks, then adaptability and functionality are improved, but fault finding and detection of unauthorized changes become more difficult
Solution Approach 1:
The system creates a baseline version of the automation software before deployment and stores it securely. This preliminary action enables future comparisons to detect any unauthorized changes, allowing the system to maintain flexibility while providing a reference point for security verification.
Solution Approach 2:
The system creates and stores copies of the automation software at different points in time. By comparing these copies, the system can detect unauthorized changes without affecting the operational flexibility of the original software. The patent specifically mentions creating a first copy at a first point in time and a second copy at a second point in time for comparison purposes.
2Adaptability or versatility
If automation software is increased in complexity to meet growing automation requirements, then functionality is improved, but the risk of intentional or unintentional manipulation increases
Solution Approach 1:
The system implements a feedback mechanism by automatically comparing current software versions against baseline versions and alerting to any detected changes. This feedback loop enables continuous monitoring of the automation software, allowing the system to maintain complex functionality while providing ongoing security verification to detect manipulations.
Solution Approach 2:
The system performs preliminary actions by creating and storing secure baseline copies of the automation software before deployment and at subsequent points in time. These pre-established references enable future detection of intentional or unintentional manipulations without affecting the operational complexity and functionality of the current software.
3Productivity
If automation devices are increasingly networked to enable complex automation tasks, then productivity is improved, but the risk of unauthorized accesses and changes via data connections increases
Solution Approach 1:
The system creates and stores copies of the automation software at different points in time, enabling comparison to detect unauthorized changes that may result from networked accesses. This approach allows the system to maintain high productivity through networking while providing a mechanism to identify and respond to security incidents.
Solution Approach 2:
The system implements automated feedback through comparison of software versions stored at different points in time, enabling continuous monitoring for unauthorized changes that may result from networked accesses and data connections, thus maintaining productivity while enhancing security.
Data Source
AI summary
The system described herein relates to analyzing an automation software of an automation device, in particular of a programmable logic controller, of a technical device, in particular of the machine and/or of the installation. The automation device is enabled to execute automation technology tasks using automation software that is executable by the automation device, where the automation software includes programs and data with which the programs interact. A first version of the automation software stored in a data memory of the automation device at a first point in time is compared with a second version of the automation software stored in the data memory of the automation device at a second point in time by analysis software.