Year: 2025
Type: conference-paper
Abstract: The convergence of Operational Technology (OT) and Information Technology (IT) has heightened risks for critical infrastructure (CI) and industrial control systems (ICS), leading to a surge in diverse and sophisticated OT attacks with severe consequences.Thus, this study combines the Diamond Model with the Cyber Kill Chain to analyze potential attack paths and methods in the GhostSec case, where attackers compromised a Berghof PLC to demonstrate their access capabilities.Understanding these attack paths offers valuable insights into adversary strategies, aiding in the development of defense measures to prevent similar attacks.
Authors: Cheng-Ying He, Nai-Yu Chen, Jung-Shain Li, I-Hsien Liu
Institution: National Cheng Kung University
Language: English
Subfield: Control and Systems Engineering
Field: Engineering
Domain: Physical Sciences
Open Access status: bronze
OpenAlex ID: W4409913415