Dissecting the Industrial Control Systems Software Supply Chain

Constantine Doumanidis; Yongyu Xie; Prashant H.N. Rajput; Ryan Pickren; Burak Sahin; Saman Zonouz; Michail Maniatakos

doi:10.1109/MSEC.2023.3266775

Dissecting the Industrial Control Systems Software Supply Chain

Constantine Doumanidis, Yongyu Xie, Prashant H.N. Rajput, Ryan Pickren, Burak Sahin, Saman Zonouz, Michail Maniatakos

Research output: Contribution to journal › Article › peer-review

Abstract

Industrial control system (ICS) platforms are increasingly relying on third-party software components forming an untrusted supply chain. In this work, we investigate components and their security in this supply chain, dissecting firmware from major international ICS vendors.

Original language	English (US)
Pages (from-to)	39-50
Number of pages	12
Journal	IEEE Security and Privacy
Volume	21
Issue number	4
DOIs	https://doi.org/10.1109/MSEC.2023.3266775
State	Published - Jul 1 2023

ASJC Scopus subject areas

Law
Electrical and Electronic Engineering
Computer Networks and Communications

Access to Document

10.1109/MSEC.2023.3266775

Cite this

@article{5c5f3e2fb93644d0b8add6d1bc9521db,

title = "Dissecting the Industrial Control Systems Software Supply Chain",

abstract = "Industrial control system (ICS) platforms are increasingly relying on third-party software components forming an untrusted supply chain. In this work, we investigate components and their security in this supply chain, dissecting firmware from major international ICS vendors.",

author = "Constantine Doumanidis and Yongyu Xie and Rajput, {Prashant H.N.} and Ryan Pickren and Burak Sahin and Saman Zonouz and Michail Maniatakos",

note = "Publisher Copyright: {\textcopyright} 2003-2012 IEEE.",

year = "2023",

month = jul,

day = "1",

doi = "10.1109/MSEC.2023.3266775",

language = "English (US)",

volume = "21",

pages = "39--50",

journal = "IEEE Security and Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "4",

}

TY - JOUR

T1 - Dissecting the Industrial Control Systems Software Supply Chain

AU - Doumanidis, Constantine

AU - Xie, Yongyu

AU - Rajput, Prashant H.N.

AU - Pickren, Ryan

AU - Sahin, Burak

AU - Zonouz, Saman

AU - Maniatakos, Michail

PY - 2023/7/1

Y1 - 2023/7/1

N2 - Industrial control system (ICS) platforms are increasingly relying on third-party software components forming an untrusted supply chain. In this work, we investigate components and their security in this supply chain, dissecting firmware from major international ICS vendors.

AB - Industrial control system (ICS) platforms are increasingly relying on third-party software components forming an untrusted supply chain. In this work, we investigate components and their security in this supply chain, dissecting firmware from major international ICS vendors.

UR - http://www.scopus.com/inward/record.url?scp=85161062777&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85161062777&partnerID=8YFLogxK

U2 - 10.1109/MSEC.2023.3266775

DO - 10.1109/MSEC.2023.3266775

M3 - Article

AN - SCOPUS:85161062777

SN - 1540-7993

VL - 21

SP - 39

EP - 50

JO - IEEE Security and Privacy

JF - IEEE Security and Privacy

IS - 4

ER -

Dissecting the Industrial Control Systems Software Supply Chain

Abstract

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this