"EtherNet/IP is an industrial control protocol built on…" — Francisco Tacliad (#c383)

Card #c383IR // #c383SynthesisMilitary report

EtherNet/IP is an industrial control protocol built on TCP/IP — extending TCP/IP to industrial control systems made them "more readily accessible to the outside world," and embedded control systems on Navy afloat and ashore platforms use EtherNet/IP, making those platforms prime targets for cyber attack; the thesis built ENIP Fuzz, a Scapy-based fuzzer, to test a proprietary EtherNet/IP implementation's susceptibility to malformed packets.

— In our words · Source: ENIP Fuzz: a Scapy-based EtherNet/IP fuzzer for security testing (Francisco Tacliad)

[Use when]

Probe your systems the way an attacker would — security lives in the implementation, not the diagram, and fuzzing is how you make the diagram tell the truth.

[Why it matters]

The protocols that run ships, plants, and grids were bolted onto the internet's plumbing — and the way to find their holes before attackers do is to throw malformed packets at them deliberately.