Section 14: Attacks on Specialized Systems

Question 1

Zwave

Answer 1

A short range, low latency data transfer technology that uses less
power and has lower data rates than Wi-Fi

Question 2

ANT+

Answer 2

A technology used for the collection of sensor data from different
IoT devices

Question 3

Most IOT devices use an embedded version of ______as their OS

Answer 3

Linux of Android

Question 4

Common Vulnerabilities of IOT

Answer 4

Insecure defaults
● Default login credentials
● No password set
● Number of open ports
● Unauthorized connection
● Firewall being turned off

▪ Hard-coded configurations
● Self-registering device
● Usernames and passwords in plain text
● Unchangeable settings

▪ Cleartext communication
● Sending data in plain text

Question 5

Embedded Systems

Answer 5

Embedded Systems
▪ A computer system that is designed to perform a specific, dedicated function
▪ Embedded systems can be a simple device or fully complex with the use of operating systems

Microcontroller in a medical IV drip system

Question 6

Programmable Logic Controller (PLC)

Answer 6

▪ A type of computer designed for deployment in an industrial or outdoor setting that can automate and monitor mechanical systems

▪ PLC firmware can be patched and reprogrammed to fix vulnerabilities

Question 7

System-on-Chip (SoC)

Answer 7

A processor that integrates the platform functionality of multiple logical controllers onto a single chip
▪ System-on-Chip are power efficient and used with embedded systems

Question 8

Field Programmable Gate Array (FPGA)

Answer 8

A processor that can be programmed to perform a specific function by a customer rather than at the time of manufacture
▪ End customer can configure the programming logic to run a specific application instead of using an ASIC (application-specific integrated circuit)

Question 9

Operational Technology (OT)

Answer 9

▪ Designed to implement an industrial control system rather than business and data networking systems

Question 10

Fieldbus

Answer 10

Links different programmable logic controllers together

Question 11

Modbus

Answer 11

▪ Gives control servers and the SCADA host the ability to query and change configurations of each PLC over a network

▪ Modbus looks and functions differently than TCP/IP does

Proprietary Protocol