Top 20 Secure PLC Coding Practices
Sara Fluchs and Vivek Ponnada introduce the community-driven Top 20 Secure PLC Coding Practices, bringing secure engineering directly into ladder logic.
Summary
Securing Programmable Logic Controllers at the Code Level
While perimeter firewalls and network monitoring are common in OT, the ladder logic running directly inside Programmable Logic Controllers (PLCs) often lacks basic security checks.
Introducing the Top 20 Secure PLC Coding Practices
Sara Fluchs and Vivek Ponnada introduce an open-source, vendor-agnostic standard providing engineers with 20 actionable secure coding rules for PLC logic.
Defensive Engineering Inside Controller Logic
Key practices include monitoring PLC cycle times, validating analog sensor input ranges, and implementing software plausibility checks to detect sensor tampering.
Adopting Secure Coding in Industrial Automation
The authors provide integration blueprints for automation engineers, system integrators, and asset owners to embed secure coding into commissioning standards.
Related talks
ICS Village·46 min
Ben Gardiner
Introduces two open tools for auditing and testing power-line communications and PLCs in heavy-duty vehicles.
ICS Village·49 min
Nadav Erez
Explores parsing proprietary ICS engineering project files to gain deep forensic visibility into industrial controllers.
S4 Events·25 min
Engineers explore architecture and security mechanisms for Secure Coding Practices for PLC's.