Security BSides CDMX

Little is currently known about the TRAME protocols, their interaction in SCADA and their failures in PCBs. Showing the real possibilities of stopping a meter, or attacking a power station without the need for malware can be exciting.

The TRAME’s routing system, like in the original ARPAnet, was based on the Bellman-Ford algorithm but with “split-horizon”, as in the Swedish TIDAS network but with an original improvement. This protocol allows to find optimal paths in meshed networks for each packet to transmit allowing the sharing of the same network by multiple services. SCADA in terms of data integrity and availability set by International Electrotechnical Commission (IEC) standard IEC-870-5-1 and ANSI C37.1. Sniffing the packets through the multiple uncorrected bugs makes the attack possible, manipulating the message that the control center receives, using this bug as a vector for a series of attacks. The protocols trames make possible the attack due to the bad functioning of the router PCBs. (TRAME +). A directed attack can stop the operation of a power station or a simple metro station.