Inst ToolsInst ToolsInst Tools
  • Courses
  • Automation
    • PLC
    • Control System
    • Safety System
    • Communication
    • Fire & Gas System
  • Instrumentation
    • Design
    • Pressure
    • Temperature
    • Flow
    • Level
    • Vibration
    • Analyzer
    • Control Valve
    • Switch
    • Calibration
    • Erection & Commissioning
  • Interview
    • Instrumentation
    • Electrical
    • Electronics
    • Practical
  • Q&A
    • Instrumentation
    • Control System
    • Electrical
    • Electronics
    • Analog Electronics
    • Digital Electronics
    • Power Electronics
    • Microprocessor
  • Request
Search
  • Books
  • Software
  • Projects
  • Process
  • Tools
  • Basics
  • Formula
  • Power Plant
  • Root Cause Analysis
  • Electrical Basics
  • Animation
  • Standards
  • 4-20 mA Course
  • Siemens PLC Course
Reading: #7 PLC Best Practices – Validate and Alert for Paired Inputs/Outputs
Share
Notification Show More
Font ResizerAa
Inst ToolsInst Tools
Font ResizerAa
  • Courses
  • Design
  • PLC
  • Interview
  • Control System
Search
  • Courses
  • Automation
    • PLC
    • Control System
    • Safety System
    • Communication
    • Fire & Gas System
  • Instrumentation
    • Design
    • Pressure
    • Temperature
    • Flow
    • Level
    • Vibration
    • Analyzer
    • Control Valve
    • Switch
    • Calibration
    • Erection & Commissioning
  • Interview
    • Instrumentation
    • Electrical
    • Electronics
    • Practical
  • Q&A
    • Instrumentation
    • Control System
    • Electrical
    • Electronics
    • Analog Electronics
    • Digital Electronics
    • Power Electronics
    • Microprocessor
  • Request
Follow US
All rights reserved. Reproduction in whole or in part without written permission is prohibited.
Inst Tools > Blog > PLC Tutorials > #7 PLC Best Practices – Validate and Alert for Paired Inputs/Outputs

#7 PLC Best Practices – Validate and Alert for Paired Inputs/Outputs

Alarm the operator when input/output states occur that are physically not feasible. Validate and alert for paired inputs/outputs in PLC.

Last updated: September 21, 2021 1:46 pm
Editorial Staff
PLC Tutorials
No Comments
Share
5 Min Read
SHARE

If you have paired signals, ensure that both signals are not asserted together. Alarm the operator when input/output states occur that are physically not feasible.

Contents
ExampleExamples for toggling paired signals that could be damaging

Consider making paired signals independent or adding delay timers when toggling outputs could be damaging to actuators.

Security ObjectiveTarget Group
The integrity of PLC variables ResilienceProduct Supplier Integration / Maintenance Service Provider

Guidance

Paired inputs or outputs are those that physically cannot happen at the same time; they are mutually exclusive. Though paired signals cannot be asserted at the same time unless there is a failure or malicious activity, PLC programmers often do not prevent that assertion from happening.

Validation is easiest to directly do in the PLC because the PLC is aware of the process state or context. Paired signals are easier to recognize and track if they have sequential addresses (e.g., input 1 and input 2).

Another scenario where paired inputs or outputs could cause problems is when they are not asserted at the same time, but toggled quickly in a way that damages actuators.

Example

Examples of paired signals:

  1. START and STOP
  • Independent start & stop: Configure start and stop as discrete outputs instead of having a single output that can be toggled on/off. By design, this does not allow simultaneous triggers. For an attacker, it is way more complicated to rapidly toggle on / off if two different outputs have to be set.
  • Timer for restart: Also consider adding a timer for a re-start after a stop is issued to avoid rapid toggling off start/stop signals.

2. FORWARD and REVERSE

3. OPEN and CLOSE

Examples for toggling paired signals that could be damaging

If the PLC / MCC accepts a discrete input, this provides an easy option for an attacker to cause physical damage on actuators. The well-known scenario for toggling outputs to do damage would be an MCC, but this practice applies to all scenarios where toggling outputs could do damage.

A proof of concept where rapidly toggling outputs could cause real damage was the Aurora Generator Test in 2007 conducted by the Idaho National Laboratory, where toggling outputs out of sync caused circuit breaker damage.

Why?

Beneficial for…?Why?
          Security1. If PLC programs do not account for what is going to happen if both paired input signals are asserted at the same time, this is a good attack vector.

2. Both paired input signals being asserted is a warning that there is an operational error, programming error, or something malicious is going on.

3.  This avoids an attack scenario where physical damage can be caused to actuators.
    Reliability1. Paired input signals can point to a sensor being broken or mis-wired or that there is a mechanical problem like a stuck switch.

2. Quickly toggling start and stop could also be done by mistake, so this also prevents damage that might be done inadvertently.
Maintenance/

References

Standard/frameworkMapping
  MITRE ATT&CK for ICSTactic:  TA010 – Impair Process Control
Technique:  T0836 – Modify Parameter, T0806 – Brute Force I/O
  ISA 62443-3-3SR 3.5: Input Validation
SR 3.6: Deterministic Output
  ISA 62443-4-2CR 3.5: Input Validation
CR 3.6: Deterministic Output
  ISA 62443-4-1SI-2: Secure coding standards
SVV-1: Security requirements testing
MITRE CWECWE-754: Improper Check for Unusual or Exceptional Conditions

Source: PLC Security

Don't Miss Our Updates
Be the first to get exclusive content straight to your email.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
You've successfully subscribed !

Continue Reading

How to Convert Voltage to Current using Resistor ?
Actuator Sensor Interface (ASi) Protocol in PLC
Allen Bradley PLC ControlLogix Hardware
Grounding or Earthing Scheme in DCS or PLC Systems
Raw Counts to Engineering Units : Conversion Formula
Schneider Electric PLC Timer Problem: Vacuum Cleaner
Share This Article
Facebook Whatsapp Whatsapp LinkedIn Copy Link
Share
Leave a Comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected

128.3kFollowersLike
69.1kFollowersFollow
210kSubscribersSubscribe
38kFollowersFollow

Categories

Explore More

PLC Pump Control: 10 seconds ON & 20 seconds OFF
Omron PLC for Product Painting with Integrated Weighing System
Basics of PLC Programming
SCADA Multiple Choice Questions
What are FIFO and LIFO Sequences in PLC?
Compare Two Offline PLC Projects
What is a PLC Retrofitting Project? – Importance, Procedure
How to Filter Digital and Analog Inputs in a PLC?

Keep Learning

Yokogawa DCS Tutorials - Configuration of Analog Input (Transmitter)

Yokogawa DCS Tutorials – Configuration of Analog Input (Transmitter)

PLC Ladder Logic for Lube Oil Pump Motor

PLC Ladder Logic for Lube Oil Pump Motor

PLC Program for Washing Machine

PLC Program for Washing Machine

DCS Marshalling Cabinet

The Purpose of Marshalling Cabinet or Marshalling Panel

Motor ON OFF Logic in PLC

Motor ON OFF Logic in PLC

Relay Parts

Difference Between NO and NC Contacts

How PLC controls a ON-OFF Valve

PLC Valve Control Ladder Logic Programming

NO NC Contact Animation

Equivalent Logic Gates using PLC Ladder Diagrams

Learn More

Solenoid Valve Problems and Solutions

Solenoid Valve Problems and Solutions

Bimetallic Thermometer

Bimetallic Thermometer

Basics of Vibration Measurement

Basics of Vibration Measurement

Field Transmitter Range Calculation

Transmitter Turndown Ratio, Set Span and Zero Span

Pressure Relief Valve Terminology

Pressure Relief Valve Terminology

pi filter Operation

pi filter Operation

Motor Library in Studio 5000 PLC

Create User-Defined Data Types and Function Blocks in Studio 5000

Digital Control Systems

Z-transform Analysis of Sampled-Data Control Systems

Menu

  • About
  • Privacy Policy
  • Copyright

Quick Links

  • Learn PLC
  • Helping Hand
  • Part Time Job

YouTube Subscribe

Follow US
All rights reserved. Reproduction in whole or in part without written permission is prohibited.
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?