cyber security

Effective Security Requires Involved Leadership

Posted by ernest.hayden on Apr 18 2012

Note from Eric Byres: As cyber threats directed at industry become more common, it is important for top executives to become involved with their organization’s cyber security policies. The following article by Ernie Hayden comments on the situation from an IT perspective. My point of view is that today’s threats to operational systems merit the same degree of m

Defense in Depth is Key to SCADA Security - Part 1 of 2

Posted by Eric Byres on Feb 28 2012

In my blog article on the Factory of the Future I mentioned the concept of Defense in Depth. This is such a critical foundation in the field of security that I am going to dedicate a number of columns over the next few weeks to this topic.

Getting Started on ICS and SCADA Security (Part 1 of 2)

Posted by Eric Byres on Aug 10 2011

The furor over the Siemens vulnerabilities and the fear that Son-of-Stuxnet could be around the corner has raised awareness of the need for cyber security to be taken seriously by the process and critical infrastructure

Stuxnet - I was wrong

Posted by Eric Byres on Sep 17 2010

Back in July when Stuxnet first became public, I wrote in our Siemens PCS7 WinCC Malware White Paper and told anyone that would listen that Stuxnet was targeted at stealing intellectual property from process systems.

Using Modbus PLC's? Here's How To Protect Them

Posted by Scott Howard on Aug 26 2010

Last week I wrote about a malicious attack on an industrial control system (ICS) initiated by outsiders. This week I'll discuss a PLC accident caused by an insider, and suggest some possible solutions for both of these incidents.

Sample ICS Security Incident: Hackers Shut Down Crude Oil Loading Terminal For 8 Hours

Posted by Scott Howard on Aug 17 2010

We had a request recently from a reader to provide an example of a malicious attack by outsiders on a control system, how it was done, and what impact it had on the plant and the owner. This is surprisingly tough to do, because according to RISI the vast majority of security incidents are internal and/or accidental in nature.