Securing Modbus TCP Communications in I4.0: A Penetration Testing Approach Using OpenPLC and Factory IO
George Lazaridis, Anastasios Drosou, Periklis Chatzimisios, Dimitrios K. Tzovaras · 2023
The advent of Industry 4.0 has brought forward transformative advancements in industrial automation and control systems, enhancing operational efficiency and productivity. Among the key communication protocols facilitating this paradigm shift, Modbus TCP is a widely adopted protocol for real-time data exchange between devices in industrial environments. However, the proliferation of interconnected devices also raises significant cybersecurity concerns. The current paper presents a comprehensive penetration testing approach aimed to securing Modbus TCP communications within the context of Industry 4.0. Leveraging the capabilities of software platforms, such as OpenPLC and Factory IO, we simulate industrial control systems to assess the vulnerabilities and weaknesses present in Modbus TCP implementations. By proactively addressing Modbus TCP security issues, our research work contributes to the safeguarding of critical infrastructure and underscores the importance of cybersecurity in the Industry 4.0 era.