How Are Industrial Control Systems Insecure by Design? A Deeper Insight Into Real-World Programmable Logic Controllers

Programmable logic controllers (PLCs) have design features to enable operations, such as real-time control of physical processes. These features have weaknesses, making PLCs vulnerable to attacks (network/firmware based). We study these features and attacks and suggest security requirements for designing a PLC.