I'm really interested in ICS security and when I discovered LICSTER project I was impressed. Really a great job! While I'm arranging the hardware modules to build the test bed, I am curious to understand the low level communications but I found out an obstacle. I'm quite new on PLC and SCADA communications and for me it's not clear how to map PLC registers, inputs and status to the SCADA data points and view points. Could you please suggest some documentation to start with about how to configure the SCADA - PLC connections and links? I tried to figure out something by the PCAP sniffing (capture_off.pcap and capture_producing.pcap), but I was even more confused... For example, why only input0 (offset 800) is read by SCADA-LTS towards PLC and not inputs 1, 2 and 3?
Hi there,
I'm really interested in ICS security and when I discovered LICSTER project I was impressed. Really a great job! While I'm arranging the hardware modules to build the test bed, I am curious to understand the low level communications but I found out an obstacle. I'm quite new on PLC and SCADA communications and for me it's not clear how to map PLC registers, inputs and status to the SCADA data points and view points. Could you please suggest some documentation to start with about how to configure the SCADA - PLC connections and links? I tried to figure out something by the PCAP sniffing (capture_off.pcap and capture_producing.pcap), but I was even more confused... For example, why only input0 (offset 800) is read by SCADA-LTS towards PLC and not inputs 1, 2 and 3?
Thanks a lot for any suggestion! Fabio