Hacking an optics manufacturing machine: You don't see it coming?!

Robert Wildenauer; Karl Leidl; Martin Schramm

doi:10.1117/12.2526691

28 June 2019 Hacking an optics manufacturing machine: You don't see it coming?!

Robert Wildenauer, Karl Leidl, Martin Schramm

Proceedings Volume 11171, Sixth European Seminar on Precision Optics Manufacturing; 1117107 (2019) https://doi.org/10.1117/12.2526691
Event: Sixth European Seminar on Precision Optics Manufacturing, 2019, Teisnach, Germany

Abstract

With more and more industrial devices getting inter-connected the attack surface for cyber attacks is increasing steadily. In this paper the possible approach of an attacker who got access to the office network at the Institute for Precision Manufacturing and High-Frequency Technology (IPH) to attack one of the optic machines that reside in another network segment is presented. Based on known vulnerabilities from the Common Vulnerabilities and Exposures (CVE), like the shellshock exploit or remote code execution with PsExec, for devices identified in the network, an attacker can bypass the firewall between the office network and the laboratory network and get full access to the HMI of the target machine.

Citation Download Citation

Robert Wildenauer, Karl Leidl, and Martin Schramm "Hacking an optics manufacturing machine: You don't see it coming?!", Proc. SPIE 11171, Sixth European Seminar on Precision Optics Manufacturing, 1117107 (28 June 2019); https://doi.org/10.1117/12.2526691

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available