# A Simple Experimental Stand for Studying the Network Security Level of Power Electronic Devices
## 6 Results
### Results from the Study of the EATON PDU  
Figure 10 presents the result of scanning for open ports, which is the first step of the proposed methodology. The TCP SYN scan command \"-sS\" was used, which is relatively unobtrusive and hidden as it never completes the TCP handshake. As can be seen from the result there is only one open port, 80, through which the studied PDU is accessed and managed. Figure 11 presents the result of the open port scan with hping3, which was done to confirm the results of the Nmap scan. As can be seen from the result, again only port 80 is open, the rest are closed. The result confirms the results obtained by Nmap. Figure 10: Nmap port scanning for the EATON PDU. For the second step of the methodology, analyzing for well-known vulnerabilities, the Nmap tool was again used. Figure 12 presents the result of the analysis of the EATON PDU when it was subjected to a slowloris attack (slowloris is a DoS attack that allows the attacker to overwhelm the attacked server by opening and maintaining many concurrent HTTP connections between the attacker and the target). As can be seen from the result, Nmap cannot give a concrete answer as to whether the studied PDU is vulnerable to DoS attacks or not. In order to determine this, it is necessary to perform penetration tests with DoS attacks. Figure 11: Summary of hping3 port scanning for the EATON PDU. Figure 12: Result of the slowloris for the EATON PDU. The PDU was also studied for any possible vulnerabilities using the \"vuln\" command--Figure 13. As can be seen from the result, no vulnerabilities were found except the open port 80. The third step of the methodology is to verify that the information exchange between the PDU and the user/monitoring center is secure. Figure 14 shows that the exchanged information is partially secure. From the obtained result using Burp suite ver. 2024.9.4, it can be seen that the username is transmitted in plain text while the password is not. Figure 15 shows the page in the settings menu of the studied PDU where the username and password are changed. In this case the password is changed to \"password\". Figure 14: Credential information exchange for the EATON PDU by using the Burp Suite. Figure 13: Result of the vuln for the EATON PDU. In addition, all statistical information about the values of the voltage, current, power consumption is transmitted in plain text and can be manipulated. Figure 16 confirms the Burp suite results. As can be seen from the Wireshark window, the username is sent in plain text, while the password is not. The presented result confirms the result from Figure 14. The result from Figure 15 is also confirmed by Wireshark--it is exactly the same as from the Burp Suite and therefore is not presented. The final stage of the methodology is to attack the studied PDU with different DoS attacks to find out how different DoS attacks affect the PDU performance. Figure 16: Credential information exchange for the EATON PDU by using the Wireshark. Figure 15: Username change for the EATON PDU, by using the Burp Suite. Figure 17 represents the distribution of different TCP packets in normal mode--the device is accessed without problem through a browser. The result is from Colasoft Capsa Free. As can be seen from the figure, the TCP session is successful--this is evidenced by the presence of TCP FIN packets which terminate a normal successful TCP session. Figure 18 represents how many packets were sent during the TCP SYN DoS attack (this attack consists of flooding the attacked device with TCP SYN requests that the attacked device cannot respond to because it is continuously flooded with more and more TCP requests [36]). A total of 40,694,371 packets were sent. The attack is performed using the hping3 tool. Figure 19 shows the result of the \"ping\" command during the attack. From 135 packets, only 2 packets are received, and 2 packets are received incorrectly. The losses were 98.5%. The device is unreachable. Figure 19: Ping result during the TCP SYN attack for the Eaton PDU.