Active and Passive Combined Identification Approaches for Industrial Control Devices

Obtaining a complete device inventory is important for securing industrial control systems. For that reason, we developed an industrial control device identification method based on the combination of active and passive approaches. The main tasks of identification method consist of device level identification and specific device information acquisition. Device level identification algorithm, particularly with IPlayer data pre-processing, helps to obtain device types in a passive way, distinguishing between PLCs and non-PLC devices in a short time. After that, we use the active method to further obtain the details of different types of devices. Experimental results verify the effectiveness of this method.