Security Assessment of LBP16 Protocol-based CNC Machine
Taylor, Curtis [ORNL]; Asmar Awad, Rima [ORNL]; Ahmad, Irfan [Virginia Commonwealth University, Richmond]; Forihat, Yahya [Virginia Commonwealth University, Richmond] · OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information) · 2024
Subtractive manufacturing systems(SMSs) have significantly revolutionized the manufacturing industry.Computer numerical control (CNC) machines are prime examples of SMSs and valuable assets across various sectors.CNC machining is the preferred method for manufacturers seeking to produce finished products.This preference can be attributed to several critical factors, including the efficiency, the speed of the process, and its suitability for high-volume production.Securing CNC machines is our utmost priority.Any compromise or disruption to these machines can result in significant downtime, financial losses, and negative impacts on our overall productivity.This study focused on investigating the risks and vulnerabilities associated with CNC machines.We investigated systems utilizing the LBP16 protocol to communicate between the controller and the machine.Our findings revealed that an adversary could conduct cyber-physical attacks(CPAs), including sabotage and denial of service (DoS) attacks.These findings shed light on CNC machines' potential security threats and emphasize the importance of implementing robust security measures to mitigate these risks.