Designing ICS related malware analysis laboratory

Although some characteristics are similar, ICS also have characteristics that differ from traditional information processing systems. Many of these differences stem from the fact that logic executing in ICS has a direct effect on the physical world. Some of these characteristics include significant risk to the health and safety of human lives and serious damage to the environment.Besides, there are two types of malware analysis that security professionals perform: code (static) analysis or behavioural (dynamic) analysis. Then, we tried to design a specific architecture and infrastructure for developing a custom malware Lab for ICS, such as malware analysis tools (for both of static and dynamic analysis) and malware acquisition tools.

کلیدواژه ها:

Malware ، ICS (Industrial Control System) ، Analysis ، Acquisition