Minding the gaps to protect industrial PLCs from cyber threats