Restrict the type of PLC connections and available data for third-party data interfaces in a programmable logic controller,

Ensure operators can only input what’s practical or physically feasible in the process. Learn the PLC’s best rules.

Instrument the process in a way that allows for plausibility checks by cross-checking different measurements.

Assign designated register blocks for specific PLC functions in order to validate data and block unauthorized access to controller data.

PLC best practices – Validate indirections by poisoning array ends to catch fence-post errors.

HMI access to PLC variables can be restricted to a valid operational value range but further cross-checks in the PLC should be added.

Alarm the operator when input/output states occur that are physically not feasible. Validate and alert for paired inputs/outputs in PLC.

If timers and counters values are written to the PLC program, they should be validated by the programmable logic controller.

Use cryptographic hashes, or checksums to check PLC program integrity and raise an alarm when they change.