Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
SCADA industry debates flaw disclosure
Robert Lemos, SecurityFocus 2006-06-16

The outing of a simple crash bug has caused public soul-searching in an industry that has historically been closed-mouthed about its vulnerabilities.

Comments Mode:
SCADA industry debates flaw disclosure 2006-06-17
Dion Stempfley
NT on SCADA networks? Gee... 2006-06-19
assurbanipal (2 replies)
Re: NT on SCADA networks? Gee... 2006-06-19
Anonymous (1 replies)
Re: NT on SCADA networks? Gee... 2006-06-22
Anonymous
SCADA industry debates flaw disclosure 2006-06-19
Dion Stempfley
SCADA industry debates flaw disclosure 2006-07-26
Anonymous (1 replies)
SCADA industry debates flaw disclosure 2006-10-12
Anonymous (1 replies)
I am assuming that most of these comments in this froum come from people in the US. The situation appears similar in Euro, with pressure from corporate management to connect enterprise systems to the SCADA that controls the network.

On a slightly unrelated note, whilst I agree with the comments in the post concerning good network practise, this won?t help matters if you don?t have a network. A place called Telehouse in London terminates most UK IP traffic and relays most US ? Europe traffic. Part of Telehouse lost power a Sunday ago (human cock-up). Due to the move from circuit to packet networks (IP rules OK) power companies have very little option but to migrate protection and control signals to all-IP networks. Due to network topologies (and the need to use Telcos to carry at least some of the signalling) some of these signals will be transited through places such as Telehouse. It does not take much imagination to realise that loss of part of a power SCADA could trigger instability and before you know it, cascade tripping. The devil is in the detail.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11396/34127#34127







 

Privacy Statement
Copyright 2009, SecurityFocus