Beyond Debugging: Can Static Analysis Become a Reality for PLC Software Security?

This paper provides an overview of Programmable Logic Controllers (PLCs) and discusses the importance of static analysis for PLC software, highlighting its benefits and challenges. It presents the results of an evaluation of various static analysis tools and outlines a range of secure coding practices for PLCs within the context of the software development lifecycle. Based on these findings, we discuss the future needs of static analysis for PLC software and emphasize the importance of fostering a culture of shared responsibility to ensure the security of PLC systems.