I have been working with european power industry for 3 years and many scada systems both for nuclear and waterpower production as well as electrical distribution have indirect internet connections through the internal administrative network. Believe me there is a lot of ignorance and unawaerness regarding the internet threats in the "scada world" they simple don´t understand 1 that it is possible to harm them 2 that it does require tremendious knowledge and resourses so both the buyers and the scada vendors doesn´t think IT-security is necessary. But they all what´s to use TCP/IP because it´s much cheaper and it´s so convinient that the vendor can sit at "home" and give support and control the systems... THE keyword is "costreduction" thats why.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11465/34589#34589