-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
1/27
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
2/27
./-7-78$&$%9:;+$%
%./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
3/27
3?'7
?./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
4/27
+*#
&/'
CD)
&*?+*3,7*>#'(/$%-($A5'O-('7L
/-?/'+*+
A*@'+
>+'N3'%(-'7
&**,'+$&'#*&*+7L
*+(/'7&+$&'7(*%&+*A
*>
#3A&-,A'(*%%'(&'5#'(/$%-($A5'O-('7L
@@@ @@@M+'N3'%(")*%O'+&'+7
)'%&+->3?'7'%+-(/P+$%-3#7*-&($%B'37'5&*,*@'+%3(A'$+,A$%&7*+@'$,*%7L
@@@ @
@@
)'%&+->3?'7
$./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
5/27
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
6/27
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
7/27
!*/*@'6$(&A" 4'&*%&*$%Q R
*'7
& -7S
%'&@*+I&*
7+3, '7'S
=
T T
H/'+'
-&
($%
5-7+3 &&/'
('%&+->3 '7T
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
8/27
;&=7?*&&*7,+'$5*%-&7*@%T&36%'& 37'77'O'%
7& %('( $% 7#7&*7,+'$ &*%'@(*#,3&'+7L
!-6*>&/'7'$&&$(I7&$+?'&'5>A$@7
EB$(I5**+7G&/$&@'+'
;&(*,-'7-&7'A>&*;&$&&$(I7$/*A';&$&&$(I7$/*A';&,$77@*+5(+$(I7;&-%>'(&7!;J2J8!C''+73,5$&'*&/'+!&36%'&
37'7&/3#B
*,'% -A'7/$+'7L-%H-%5*@7 ,+-%&7,**A'+L
%H % *@7FC L!;J2J8!VW7* &@$+'LCD)5$&$>-A'7L,''+7
+'(& "L+ O'7&* + ?'& '?$,
W3&
->
&/'
('%&+->3?'7
$+'
P73$AA"@'=+'73+,+-7'5@/'%@'7''$&/+'$&
$-+?$,,'5>+*#&/'X%'&:/*@($%!&36%'&
Y3#,&*&/''%+-(/#'%&%'&@*+IZ
$+?' %?*%' $@LLLP!W5+-O'7U
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
9/27
P%&-A-&5-7(*O'+7&/'!"#!$"(*#,3&'+7T;&=7?*&&*7,+'$5*%-&7*@%T36%'
7'6 +'#' ", ( "$% *% "$( O$ '7
-&7,$"A*$5
@/'%
-&=7
>*3%5
$%
'6$(&
#$&(/L
./'&$+?'&'5(*#,3&'+#37&B'+3%%-%?!.JCK7*>&@$+'>+*#!-'#'%7L
./'&$+?'&'5
(*#,3&'+
#37&
B'
5-+'(&A"
(*%%'(&'5
&*
$%!K[\]C+*?+$##$BA'D*?-()*%&+*AA'+>+*#!-'#'%7L
./'CD)#37&>3+&/'+B'(*%%'(&'5&*$&A'$7&7-6
)C
[01
]
8'&@*+I
2*53A'7
>+*#
!-'#'%7L
J$(/8'&@*+I2*53A'#37&B'(*%%'(&'5&*^[\T
L
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
10/27
P%&-A-&5-7(*O'+7&/'!"#!$"(*#,3&'+7T36%' 7'6 +'#'
", ( "$% *% "$( O$ '7
-&7 ,$"A*$5@/'%-&=7
>*3%5
$%
'6$(&
#$&(/L
8*@->"*35*&/'#$&/TL
$&$(* %( '%('
./'(+'$&*+7*>
!&36%'&
O'+->-'7&/$&&/'5-7(*O'+'5C+*?+$##$BA'D*?-()*%&+*AA'+T
36%' #37
$O'
?3'77'5$AA*>&/'7'5'&$-A7L
;7(*%&+*AA-%?$&A'$7&
T
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
11/27
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
12/27
8*@!&36%'& ?'&75*@%&*B37-%'77T
+'N3'%("(*%O'+&'+753+-%?&/'-+%*+#$A
*,'+$&-*%>*+\[5$"7U
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
13/27
8*@!&36%'& ?'&75*@%&*B37-%'77T
f%('
-&=7
73+':
&/'
#$A-(-*37
CD)
A*?-(
B'?-%7
-&7
#-7(/-'>U
./'%7A'',7>*+1K5$"7L
&36%'& +$ 7'7& '7,
%+$&'&*\0\be9>*+\]#-%7L
./'%7A*@7&/'7,-%+$&'&*1e9>*+]b#-%7L
'%7 '',7 *+ $"7L
!&36%'& +','$&7&/-7,+*('77*O'+$%5*O'+L
0Hz 1500Hz
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
14/27
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
15/27
8*@!&36%'& ?'&75*@%&*B37-%'77T
H/$&
$B*3&
B3-A&
-%
>$-A
7$>'
7"7&'#7Z
H'AA:-%>$(&:&/'7'>$(-A-&-'7&",-($AA"5*
/$O'>$-A7$>'(*%&+*A7L
!&36%'&+'(*+57&'A'#'&+"+'$5-%?7@/-A'&/'
('%&+->3?'7$+'*,'+$&-%?
./'"&+-??'+$7/3&5*@%->&/'>+'N3'%("?*'7*3&
%*+#$AA"L
+'(*+5'55$&$&* **A&/'>$-A7$>'7"7&'#7U
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
16/27
'(&'5&/3#B5+-O'737-%?$Q+**&I-&LR
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
17/27
-O'5-7&-%('(/$%-7#7&*(*%('$A-&7'A>L
!&36%'&
-%/-B-&75->>'+'%&B'/$O-*+7-%&/',+'7'%('*>5->>'+'%&
L
$3%(
$(
D$3%(/
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
18/27
-O'5-7&-%('(/$%-7#7&*(*%('$A-&7'A>L
!&36%'&
(*#,A'&'A"5'A'&'7-&7'A>>+*#P!WI'"7$>&'+-&/$7L
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
19/27
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
20/27
-O'5-7&-%('(/$%-7#7&*(*%('$A-&7'A>L
!&36%'&
(*%('$A7-&7#$A-(-*37Q(*5'R(/$%?'7&*&/'CD)
;%7&+3(&-*%7&*&/')'%&+->3?'7
V3+-%?%*+#$A*,'+$&-*%S
CD)
;%($7'*>'#'+?'%("S;48fFJfCJF
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
21/27
V-5;&!3((''5Z
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
22/27
V-5;&!3((''5Z% ($& *%7$+'& $& &
!"#$%&'(&'A'#'&+"-%5-($&'7&/$&+$&/'+&/$%5-+'(&A"T
./'$&&$(I'+7-%>'(&'5>-O'-%537&+-$A(*#,$%-'7@-&/
*&'%&-$A73B(*%&+$(&-% +'A$&-*%7/-
7@-&/&/' A$%&L
./'7'(*#,$%-'7EA-I'A"G&/'%3%I%*@-%?A">'++-'5&/'-%>'(&-*%-%&*8$&$%9=7
+'7'$+(/$%5'%+-(/#'%&%'&@*+I7L
./';%7&-&3&'>*+!(-'%('$%5;%&'+%$&-*%$A!'(3+-&"@+-&'7S
Q;&-7-%(+'$7-%?A"$((',&'5&/$&:-%A$&'1bbi*+'$+A"1b\b:
!&36%'&5'7&+*"'5$B*3&\:bbb;F\('%&+->3?'7*3&*>$B*3&
R: L
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
23/27
e'+'=7H/$&H'M*3%5
E./'7'
?+$,/7
7/*@
/*@
&/'
5-7(*O'+'5
7$#,A'7
7,+'$5G
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
24/27
e'+'=7H/$&H'M*3%5
%$
:
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
25/27
e'+'=7H/$&H'M*3%5
BC@BDdbLbb
E'F*2'6)*'-(
-G
H(G#5*#,
.3F*#&F
%@>A1bLbb
[bLbb
L
@ @ @ @
bLbb
L
;F$+'$?$-%7&
,/"7-($A-%>+$7&+3(&3+'
-7
>'$7-BA'L
P%>*+&3%$&'A":&/'7$#'&'(/%-N3'7($%B'37'5&*
$&&$(I*&/'+
/ 7-($A
$%5
O-+&3$A
7 7&'#7L
./'012-%3&'43-5'&*!&36%'&
-
8/10/2019 Lecture 2 42-Minute Guide to Stuxnet
27/27
!"1(K3-)L!"1(K
3-)L
0-M32'7"*N%D>D.3&1(*#50-2M-21*'-(@O;;2'7"*F2#F#2P#,@!"#$%&'($%5&/'!"#$%&'(D*?*$+'&+$5'#$+I7*++'?-7&'+'5&+$5'#$+I7*>!"#$%&'()*+,*+$&-*%*+-&7$>>-A-$&'7-%&/'PL!L$%5*&/'+(*3%&+-'7L
f&/'+%$#'7#$"B'&+$5'#$+I7*>&/'-++'7,'(&-O'*@%'+7L
./-75*(3#'%&-7,+*O-5'5>*+-%>*+#$&-*%$A,3+,*7'7*%A"$%5-7%*&-%&'%5'5$7$5O'+&-7-%?L
*+#$&-*%-%&/-75*(3#'%&-773BY'(&&*(/$%?'@-&/*3&%*&-('L
%C./'012-%3&'43-5'&*!&36%'&
