ICS Summary for Week of September 14
By Nathaniel Weeks on September 18, 2018
Crafting Modbus Packets
Industrial Control Systems (ICS) operate on a different set of protocols from what the public generally uses. These protocols are becoming more integrated into existing infrastructure and now operate more frequently over Internet protocols like TCP/IP. Modbus is a commonly used ICS protocol that now has the capability to run over TCP.
A tutorial for crafting packets is included in the word document below. The tutorial uses the tool “scapy” to replicate a specific Modbus packet. This skill can be useful for those who defend ICS networks and need to test specially crafted Modbus packets against their infrastructure. In doing so they can guard against a bad actor who may send malicious packets with the intention to cause damage to critical infrastructure.