PulseAugur
EN
LIVE 09:07:33

New verification method detects hidden malicious logic in industrial controllers

Researchers have developed a new formal verification approach called ESBMC-LLB to detect malicious logic, known as Ladder Logic Bombs (LLBs), hidden within Programmable Logic Controller (PLC) programs. This method utilizes the ESBMC-PLC+ verification engine and a novel modeling layer to expose function-block logic, which is often overlooked by existing verifiers. ESBMC-LLB effectively recasts bomb detection as a formal verification problem, capable of identifying non-termination payloads and actuator-forgery payloads. The system has demonstrated high detection rates on public datasets, outperforming other methods in identifying adaptive triggers and providing robust proofs of bomb absence. AI

IMPACT Enhances security for industrial control systems by enabling robust detection of hidden malicious logic.

RANK_REASON The cluster contains an academic paper detailing a new formal verification approach for detecting security vulnerabilities in industrial control systems.

Read on arXiv cs.CL →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

New verification method detects hidden malicious logic in industrial controllers

COVERAGE [2]

  1. arXiv cs.CL TIER_1 English(EN) · Pierre Dantas, Lucas Cordeiro, Waldir Junior ·

    Detecting Ladder Logic Bombs in IEC 61131-3 PLC Programs using ESBMC-PLC+: A Formal Verification Approach with Trigger Synthesis

    arXiv:2607.08417v1 Announce Type: new Abstract: A Ladder Logic Bomb (LLB) is malicious control logic in a Programmable Logic Controller (PLC) program that lies dormant until a trigger activates a payload to manipulate actuators, forge sensor readings, or deny operator control. We…

  2. arXiv cs.CL TIER_1 English(EN) · Waldir Junior ·

    Detecting Ladder Logic Bombs in IEC 61131-3 PLC Programs using ESBMC-PLC+: A Formal Verification Approach with Trigger Synthesis

    A Ladder Logic Bomb (LLB) is malicious control logic in a Programmable Logic Controller (PLC) program that lies dormant until a trigger activates a payload to manipulate actuators, forge sensor readings, or deny operator control. We observe that real malicious logic hides inside …