Use of Accessible Information to Improve Industrial Security Testing

Abstract

Industrial systems face increasing threats, particularly through network-connected Operational Technology (OT) components such as controllers and actuators. These components rely on standard internet protocols, making strong security essential. However, existing blackbox testing tools, crucial for securing OT, struggle to meet the unique demands of such components. This work enhances blackbox testing by leveraging available information, leading to the discovery of eight critical vulnerabilities.