Inst ToolsInst ToolsInst Tools
  • Courses
  • Automation
    • PLC
    • Control System
    • Safety System
    • Communication
    • Fire & Gas System
  • Instrumentation
    • Design
    • Pressure
    • Temperature
    • Flow
    • Level
    • Vibration
    • Analyzer
    • Control Valve
    • Switch
    • Calibration
    • Erection & Commissioning
  • Interview
    • Instrumentation
    • Electrical
    • Electronics
    • Practical
  • Q&A
    • Instrumentation
    • Control System
    • Electrical
    • Electronics
    • Analog Electronics
    • Digital Electronics
    • Power Electronics
    • Microprocessor
Search
  • Books
  • Software
  • Projects
  • Process
  • Tools
  • Basics
  • Formula
  • Power Plant
  • Root Cause Analysis
  • Electrical Basics
  • Animation
  • Standards
  • 4-20 mA Course
  • Siemens PLC Course
Reading: #7 PLC Best Practices – Validate and Alert for Paired Inputs/Outputs
Share
Notification Show More
Font ResizerAa
Inst ToolsInst Tools
Font ResizerAa
  • Courses
  • Design
  • PLC
  • Interview
  • Control System
Search
  • Courses
  • Automation
    • PLC
    • Control System
    • Safety System
    • Communication
    • Fire & Gas System
  • Instrumentation
    • Design
    • Pressure
    • Temperature
    • Flow
    • Level
    • Vibration
    • Analyzer
    • Control Valve
    • Switch
    • Calibration
    • Erection & Commissioning
  • Interview
    • Instrumentation
    • Electrical
    • Electronics
    • Practical
  • Q&A
    • Instrumentation
    • Control System
    • Electrical
    • Electronics
    • Analog Electronics
    • Digital Electronics
    • Power Electronics
    • Microprocessor
Follow US
All rights reserved. Reproduction in whole or in part without written permission is prohibited.
Inst Tools > Blog > PLC Tutorials > #7 PLC Best Practices – Validate and Alert for Paired Inputs/Outputs

#7 PLC Best Practices – Validate and Alert for Paired Inputs/Outputs

Alarm the operator when input/output states occur that are physically not feasible. Validate and alert for paired inputs/outputs in PLC.

Last updated: September 21, 2021 1:46 pm
Editorial Staff
PLC Tutorials
No Comments
Share
5 Min Read
SHARE

If you have paired signals, ensure that both signals are not asserted together. Alarm the operator when input/output states occur that are physically not feasible.

Contents
ExampleExamples for toggling paired signals that could be damaging

Consider making paired signals independent or adding delay timers when toggling outputs could be damaging to actuators.

Security ObjectiveTarget Group
The integrity of PLC variables ResilienceProduct Supplier Integration / Maintenance Service Provider

Guidance

Paired inputs or outputs are those that physically cannot happen at the same time; they are mutually exclusive. Though paired signals cannot be asserted at the same time unless there is a failure or malicious activity, PLC programmers often do not prevent that assertion from happening.

Validation is easiest to directly do in the PLC because the PLC is aware of the process state or context. Paired signals are easier to recognize and track if they have sequential addresses (e.g., input 1 and input 2).

Another scenario where paired inputs or outputs could cause problems is when they are not asserted at the same time, but toggled quickly in a way that damages actuators.

Example

Examples of paired signals:

  1. START and STOP
  • Independent start & stop: Configure start and stop as discrete outputs instead of having a single output that can be toggled on/off. By design, this does not allow simultaneous triggers. For an attacker, it is way more complicated to rapidly toggle on / off if two different outputs have to be set.
  • Timer for restart: Also consider adding a timer for a re-start after a stop is issued to avoid rapid toggling off start/stop signals.

2. FORWARD and REVERSE

3. OPEN and CLOSE

Examples for toggling paired signals that could be damaging

If the PLC / MCC accepts a discrete input, this provides an easy option for an attacker to cause physical damage on actuators. The well-known scenario for toggling outputs to do damage would be an MCC, but this practice applies to all scenarios where toggling outputs could do damage.

A proof of concept where rapidly toggling outputs could cause real damage was the Aurora Generator Test in 2007 conducted by the Idaho National Laboratory, where toggling outputs out of sync caused circuit breaker damage.

Why?

Beneficial for…?Why?
          Security1. If PLC programs do not account for what is going to happen if both paired input signals are asserted at the same time, this is a good attack vector.

2. Both paired input signals being asserted is a warning that there is an operational error, programming error, or something malicious is going on.

3.  This avoids an attack scenario where physical damage can be caused to actuators.
    Reliability1. Paired input signals can point to a sensor being broken or mis-wired or that there is a mechanical problem like a stuck switch.

2. Quickly toggling start and stop could also be done by mistake, so this also prevents damage that might be done inadvertently.
Maintenance/

References

Standard/frameworkMapping
  MITRE ATT&CK for ICSTactic:  TA010 – Impair Process Control
Technique:  T0836 – Modify Parameter, T0806 – Brute Force I/O
  ISA 62443-3-3SR 3.5: Input Validation
SR 3.6: Deterministic Output
  ISA 62443-4-2CR 3.5: Input Validation
CR 3.6: Deterministic Output
  ISA 62443-4-1SI-2: Secure coding standards
SVV-1: Security requirements testing
MITRE CWECWE-754: Improper Check for Unusual or Exceptional Conditions

Source: PLC Security

Don't Miss Our Updates
Be the first to get exclusive content straight to your email.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
You've successfully subscribed !

Continue Reading

Instrumentation Engineer Activities & Documents – Detail Design Phase
SCADA for Substation Automation
PLC Program for Alarm Security System
#14 PLC Best Practices – Restrict Third-party Data Interfaces
Siemens PLC Comparator Logic
Implement UDT in PLC Programming: User-Defined Data Type
Share This Article
Facebook Whatsapp Whatsapp LinkedIn Copy Link
Share
Leave a Comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected

128.3kFollowersLike
69.1kFollowersFollow
208kSubscribersSubscribe
38kFollowersFollow

Categories

Explore More

Raw Counts to Engineering Units : Conversion Formula
Parking Lights PLC Program Explained with Video
PID Block in RSLogix 500
PLC Automatic Control of Two Outputs with one Input
How a 4-20mA Transmitter Works?
PLC Program for Latching and unlatching Circuit
Introduction to PLC – Advantages of PLC
Studio 5000 Tutorial: PLC Programming for Digital Alarms

Keep Learning

Example of PID Control Instruction

How to Configure PID in Siemens PLC?

Latched and Momentary Operation of Motor PLC Program

Latched and Momentary Operation of Motor PLC Program

Difference Between Microcontroller and PLC

Difference Between Microcontroller and PLC

PLC Cooking Timer Example for Kitchen Automation

PLC Cooking Timer Example for Kitchen Automation

PLC Best Practices

#1 PLC Best Practices – Split PLC Code into Modules

Field Instruments

#11 PLC Best Practices – Instrument for Plausibility Checks

Allen Bradley RSLogix 500 PLC Programming

PLC Programming Example for a Batch Process

PLC Programming Example for a Batch Process

Learn More

Advantages and Applications of zigzag transformer

Features of PID Controller

Features of PID Controller actions

Control Sytem Open Loop and Closed Loop

Introduction to Control System

Major issues for Sensors Selection

Major issues for Sensors Selection

Color detection PLC logic

Conveyor Sorting System with Color Detection PLC Logic

Electrical & Electronics Measurements Objective Questions

Electrical & Electronics Measurements Objective Questions – Set 3

Differential Pressure Level Transmitter Errors

Differential Pressure Level Transmitter Errors

What is a Buchholz Relay

What is a Buchholz Relay? Working Principle

Follow US
All rights reserved. Reproduction in whole or in part without written permission is prohibited.
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?