Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
U.S. makes securing SCADA systems a priority
Robert Lemos, SecurityFocus 2005-10-28

Wary of the increasing number of online attacks against industrial control systems, the U.S. government has begun a major push to secure the systems used to control and monitor critical infrastructure, such as power, utility and transportation networks.

Comments Mode:
U.S. makes securing SCADA systems a priority 2005-11-01
Anonymous (2 replies)
Puhleese! If you folks are trying to drum up business, at least use something newer than the inept sewage spill incident in Australia five years ago.

Can't find anything? Maybe this isn't the problem you thought it was.

...

[ more ]  [ reply ]
Re: U.S. makes securing SCADA systems a priority 2005-11-03
Anonymous (1 replies)
We can only discuss the ones they admit.

Anyway risk management has to consider, not just the likelihood of bad things, but the cost if they do happen. Expectation of loss is the product of probability and cost. If someone cracks into Photo Hut's corporate database, Photo Hut might have to pay ...

[ more ]  [ reply ]
Re: Re: U.S. makes securing SCADA systems a priority 2005-11-08
Anonymous
There are many newer incidents around, but the full details cannot be detailed. Most involve a virus or worm getting into teh systems and causing disruption. The Australian example is used has it was well documented, in the public domain and a good example at what could (and does) happen.

The likl...

[ more ]  [ reply ]
Re: U.S. makes securing SCADA systems a priority 2005-11-18
Bob Radvanovsky
No -- the problem is definitively real, and there have been several more incidents than are being released to the general public under the cloak of government secrecy. They call it "Critical Infrastructure Information Security Act of 2002", which basically states that any information that would or ...

[ more ]  [ reply ]
U.S. makes securing SCADA systems a priority 2005-11-03
Industry Participant (2 replies)
NERC Standards CIP-002 thru CIP-009 are cybersecurity standards. Ther are still under development, but the original work started in 2002 - years before the legislation passed. The work is being done voluntarily by industry in order to prevent potential cyber problems of all kinds, not just SCADA. It...

[ more ]  [ reply ]
Re: U.S. makes securing SCADA systems a priority 2005-11-04
Anonymous (1 replies)
Why in the hell are these types of systems connected to the Internet in the first place?

Talk about moronic....

[ more ]  [ reply ]
Re: Re: U.S. makes securing SCADA systems a priority 2005-11-11
Anonymous
Desktop users connected over networks to control systems are also connecting to Internet. Number of firms struggling to get their arms around managing the risk better - many have had various personnel involved with different automation/process controls platfoms installed by silos of engineers. Now...

[ more ]  [ reply ]
Re: U.S. makes securing SCADA systems a priority 2005-11-18
Bob Radvanovsky
In case you've never read any of the discussion from NERC, NERC hasn't exactly moved quickly either, nor could they simply "stop on a dime". Look at how long it took them to develop CIP-001? Several very long years. I admit that the federal government has been rather lax about the whole thing, mo...

[ more ]  [ reply ]
SCADA security was recently mentioned at Brumcon 2005-11-06
brumcon
http://www.brum2600.net/brumcon5/

...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus