111
ICs VuLnerABILItIes
or intercept and change operator commands and apply inap-
propriate control sequences that introduce defects and pos-
sibly catastrophic reactions within the production process.
MoC in an ICS infrastructure creates the risk of malicious
third parties assuming control of the production infrastruc-
ture and deliberately invoking critical errors to ruin produc-
tion or destroy infrastructure—as was demonstrated by the
U.S. Department of Defense (DoD) in the Aurora experi-
ments, where a power generator was issued an ICS command
set resulting in its self-destruction.
11
e functional vulnerabilities described above are useful in ana-
lyzing previously known failures or unknown ICS vulnerabilities.
For example, by reviewing ...