On Ladder Logic Bombs in Industrial Control Systems

In industrial control systems, devices such as Programmable Logic Controllers (PLCs) are commonly used to directly interact with sensors and actuators, and perform local automatic control. PLCs run software on two different layers: a) firmware (i.e. the OS) and b) control logic (processing sensor readings to determine control actions). In this work, we discuss ladder logic bombs, i.e. malware written in ladder logic (or one of the other IEC 61131-3-compatible languages). Such malware would be inserted by an attacker into existing control logic on a PLC, and either persistently change the behavior, or wait for specific trigger signals to activate malicious behaviour. For example, the LLB could replace legitimate sensor readings with manipulated values. We see the concept of LLBs as a generalization of attacks such as the Stuxnet attack. We introduce LLBs on an abstract level, and then demonstrate several designs based on real PLC devices in our lab. In particular, we also focus on stealthy LLBs, i.e. LLBs that are hard to detect by human operators manually validating the program running in PLCs. In addition to introducing vulnerabilities on the logic layer, we also discuss countermeasures and we propose two detection techniques.Comment: 11 pages, 14 figures, 2 tables, 1 algorith

Detection of a new methanol maser line with ALMA

Aims. We aimed at investigating the structure and kinematics of the gaseous disk and outflows around the massive YSO S255 NIRS3 in the S255IR-SMA1 dense clump. Methods. Observations of the S255IR region were carried out with ALMA at two epochs in the compact and extended configurations. Results. We serendipitously detected a new, never predicted, bright maser line at about 349.1 GHz, which most probably represents the CH$_3$OH $14_{1} - 14_{0}$ A$^{- +}$ transition. The emission covers most of the 6.7 GHz methanol maser emission area of almost 1$^{\prime\prime}$ in size and shows a velocity gradient in the same sense as the disk rotation. No variability was found on the time interval of several months. It is classified as Class II maser and probably originates in a ring at a distance of several hundreds AU from the central star.Comment: 4 pages, 4 figures, accepted by Astronomy and Astrophysic

Multiwavelength properties of a new Geminga-like pulsar: PSR J2021+4026

In this paper, we report a detailed investigation of the multiwavelength properties of a newly detected gamma-ray pulsar, PSR J2021+4026, in both observational and theoretical aspects. We firstly identify an X-ray source in the XMM-Newton serendipitous source catalogue, 2XMM J202131.0+402645, located within the 95% confidence circle of PSR J2021+4026. With an archival Chandra observation, this identification provides an X-ray position with arcsecond accuracy which is helpful in facilitating further investigations. Searching for the pulsed radio emission at the position of 2XMM J202131.0+402645 with a 25-m telescope at Urumqi Astronomical Observatory resulted in null detection and places an upper-limit of 0.1~mJy for any pulsed signal at 18~cm. Together with the emission properties in X-ray and gamma-ray, the radio quietness suggests PSR J2021+4026 to be another member of Geminga-like pulsars. In the radio sky survey data, extended emission features have been identified in the gamma-ray error circle of PSR J2021+4026. We have also re-analyzed the gamma-ray data collected by FERMI's Large Area Telescope. We found that the X-ray position of 2XMM J202131.0+402645 is consistent with that of the optimal gamma-ray timing solution. We have further modeled the results in the context of outer gap model which provides us with constraints for the pulsar emission geometry such as magnetic inclination angle and the viewing angle. We have also discussed the possibility of whether PSR J2021+4026 has any physical association with the supernova remnant G78.2+2.1 (gamma-Cygni).Comment: 11 pages, 14 figure

Coherent magnetic plasmon modes in a contacting gold nano-sphere chain on a gold Slab

A coupled magnetic resonator waveguide, composed of a contacting gold nanosphere chain on a gold slab, is proposed and investigated. A broadband coherent magnetic plasmon mode can be excited in this one dimensional nanostructure. By employing the Lagrangian formalism and the Fourier transform method, the dispersion properties of the wave vector and group velocity of the magnetic plasmon mode are investigated. Small group velocity can be obtained from this system which can be applied as subwavelength slow wave waveguides.Comment: 11pages, 5 figures, This work is published at Optics Express 19, 23782 (2011

Low-temperature transport through a quantum dot between two superconductor leads

We consider a quantum dot coupled to two BCS superconductors with same gap energies $\Delta$. The transport properties are investigated by means of infinite-$U$ noncrossing approximation. In equilibrium density of states, Kondo effect shows up as two sharp peaks around the gap bounds. Application of a finite voltage bias leads these peaks to split, leaving suppressed peaks near the edges of energy gap of each lead. The clearest signatures of the Kondo effect in transport are three peaks in the nonlinear differential conductance: one around zero bias, another two at biases $\pm 2\Delta$. This result is consistent with recent experiment. We also predict that with decreasing temperature, the differential conductances at biases $\pm 2\Delta$ anomalously increase, while the linear conductance descends.Comment: replaced with revised versio