Control Server

Description

A device which acts as both a server and controller, that hosts the control software used in communicating with lower-level control devices in an ICS network (e.g. Remote Terminal Units (RTUs) and Programmable Logic Controllers (PLCs)).1

Levels

• Level 2

Notes

A control server may also be referred to with these terms in a SCADA system: MTU, supervisory controller, or SCADA server.

Techniques That Apply

• Automated Collection
• Brute Force I/O
• Command-Line Interface
• Commonly Used Port
• Data Destruction
• Data from Information Repositories
• Default Credentials
• External Remote Services
• Internet Accessible Device
• Lateral Tool Transfer
• Man in the Middle
• Masquerading
• Modify Alarm Settings
• Modify Parameter
• Monitor Process State
• Native API
• Point & Tag Identification
• Remote Services
• Remote System Discovery
• Replication Through Removable Media
• Rogue Master
• Service Stop
• Spearphishing Attachment
• Spoof Reporting Message
• Standard Application Layer Protocol
• Supply Chain Compromise
• Valid Accounts
• Wireless Compromise