detecting-stuxnet-style-attacks - Detect Stuxnet-Style OT Attacks
Detects PLC logic manipulation and spoofed sensor readings by comparing PLC integrity baselines with physics-based process behavior.
Tags
Updated: 2026-10-06Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Map attack-chain detection points
- Monitor PLC logic integrity
- Compare blocks against baselines
- Detect process model deviations
- Generate integrity alerts
Inputs
- PLC logic baselines
- Current PLC program blocks
- Industrial protocol traffic
- Process measurements
- Engineering workstation events
- Physics-based process models
Outputs
- PLC integrity alerts
- Process anomaly findings
- Baseline comparison results
- Detection status messages
Requirements
- OT/ICS environment
- Known-good PLC program copies
- OT-aware EDR monitoring
- Industrial network monitoring
- Physics-based process models
- Stuxnet attack-chain knowledge