4 ms·
MODBUS over TCP is nice and good, but I'm worried that many people will soon start using it to communicate data with web-based monitoring platforms and will do
by fest 10y ago
MODBUS over TCP is nice and good, but I'm worried that many people will soon start using it to communicate data with web-based monitoring platforms and will do it in plaintext.
The current generation of PLCs are severely limited in the security aspect (example: Siemens S7-1200 series, designed in 2009 has no libraries for secure communications. Answer from Siemens: oh, you need security? buy our security gateway then!)
- lithos 10y agoI hope not. Most of the security for modbus are in the form of MasterLocks (those locks everyone learning to pick lock buy a dozen of). If you have physical access to the system it's assumed you're supposed to be there. At least in the limited number of systems I've seen, modbus is used for communicating status rather than control.
- fest 10y agoYes, MODBUS is usually used between locally connected devices (but not always for status, often also to control motors and valves). However, it's the thing everyone in industry knows how to use so it will likely be misused to send everything in plaintext over the Internet.
- altstar 10y agoIf you are using MODBUS over the internet you should be fired immediately. Any SCADA/DCS/PLC communication should not be allowed on the internet at all.