PLC and Safety PLC Security
Programmable logic controllers run the plant's control logic, and their security, especially for safety-rated controllers, is uniquely consequential.
The Controllers That Run the Process
A programmable logic controller (PLC) is a ruggedized industrial computer that executes control logic in a fast, deterministic loop: read inputs, run the program, set outputs, repeat. PLCs directly command physical equipment, so their compromise is not a data breach but a physical one. Many were designed for reliability on trusted wires and offer little native security, no authentication on programming, no encryption of logic downloads.
Attack Surfaces
- Unauthenticated logic downloads that let anyone reprogram the controller
- Exposed engineering-workstation software used to configure PLCs
- Firmware without signature verification, permitting tampered updates
- Network protocols that accept commands from any reachable device
Safety PLCs Are Different
A safety PLC (or safety instrumented system) is a separate, higher-integrity controller whose only job is to bring the process to a safe state when defined conditions are exceeded. It is certified to a safety-integrity level, uses redundant and self-checking hardware, and is kept independent of the basic control PLCs, so that a failure or compromise of ordinary control cannot defeat the protective function.
Securing What Cannot Authenticate
Because many PLCs cannot verify who commands them, security is enforced around them: strict segmentation, restricting which hosts may program them, whitelisting the exact traffic they need, and monitoring for any unexpected logic change or connection.
Fusion Context
In the Hyperion breeder and burner designs, the safety instrumented system is a dedicated, independent controller acting on physics limits, kept apart from the supervisory control network so that no cyber compromise of ordinary control can override a protective trip. The basic-control PLCs are wrapped in segmentation, access restriction, and monitoring, consistent with the fail-safe stance that on loss of control the machine moves toward its safe state.