This event has ended. Visit the official site or create your own event on Sched.
This is the AGENDA FOR 2022 -- Please visit the main website for the latest conference information. 
Thursday, October 27 • 9:00am - 9:30am
The Security Risks of 4.0 CNC Machines

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

CNC (computer numerical control) machines are largely used in production plants and constitute a critical asset for organizations globally. The strong push dictated by the Industry 4.0 paradigm led to the introduction of technologies for the wide connectivity of industrial equipment, including CNCs. As a result, modern CNCs resemble more to fully fledged systems rather than mechanical machines, offering numerous networking services for smart connectivity. Given this shift into a more complex and software-dependable ecosystem, these machines are left more easily exposed to potential threats.

Our work explored the risks associated with the strong technological development observed in the domain of numerical controls. We conducted an empirical evaluation of four representative controller manufacturers, by analyzing the technologies introduced to satisfy the needs of the Industry 4.0 paradigm, and conducting a series of practical attacks against real-world CNC installations.

Join this session as we share findings showing that malicious users could abuse of such technologies to conduct attacks like denial-of-service, damage, hijacking or theft. We reported our findings to the affected vendors and proposed mitigations. This talk wants to be an opportunity to raise awareness in a domain in which, unfortunately, security is not yet considered an important driver.

avatar for Marco Balduzzi

Marco Balduzzi

Technical Research Lead, Trend Micro
I am a team leader and principal researcher in computer and network security. I hold Ph.D. in system security from Télécom ParisTech and an M.Sc. in computer engineering from the University of Bergamo. My interests encompass all aspects of IT security, with a particular emphasis... Read More →

Thursday October 27, 2022 9:00am - 9:30am EDT
Windsor DE