Tootfinder

A multi-layered embedded intrusion detection framework for programmable logic controllers
Rishabh Das. Aaron Werth, Tommy Morris
https://arxiv.org/abs/2510.07171 https://…

A multi-layered embedded intrusion detection framework for programmable logic controllers
Industrial control system (ICS) operations use trusted endpoints like human machine interfaces (HMIs) and workstations to relay commands to programmable logic controllers (PLCs). Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk safety-critical operation. This research presents an embedded intrusion detection system that runs inside the controller and uses header-level telemetry to detect and respond to network attacks. The sys…