Practical SCADA Security

Control System Security Threats, Security / Reliability Incidents, Useful Industrial Cyber Security Tips

submitted by: Eric Byres
on: Fri, 2011-12-16 09:31

On December 12, Rubén Santamarta publicly announced details of multiple vulnerabilities affecting the Schneider Electric Quantum Ethernet Module. These are serious vulnerabilities, involving hard-coded passwords that give an attacker complete access to the device.  As Reid Wightman puts it 

submitted by: Eric Byres
on: Wed, 2011-12-07 16:03

Last year during the holiday season, I discussed the merits and demerits of the Kindle as a potential gift for a controls engineer. If you have not made up your mind on what you would like this year, I am once again putting forward a suggestion, along with my comments, on a gift that just might make your heart sing.

submitted by: Eric Byres
on: Wed, 2011-11-30 10:32

I just returned from the massive SPS IPC Drives show in Nuremburg, Germany. This is a massive show - according to the SPS web site, there were 56,321 visitors! An industrial automation show of this size is something I haven’t seen in North America since the glory days of ISA in the 1980s. If you want to see the trends and new technologies in the automation world, this is a good place to start.

submitted by: Eric Byres
on: Tue, 2011-11-22 11:05

Last week (Nov 18) a hacker calling himself Pr0f demonstrated how he could easily hack into a SCADA system controlling the water utility at the City of South Houston.

submitted by: Eric Byres
on: Mon, 2011-11-21 11:42

Last week Joe Weiss caused a bit of a storm by releasing information on a cyber attack on the water SCADA system at the Curran-Gardner Township Public Water District, in Illinois. Now it seems like a second water utility has been hacked, this time in the City of South Houston.