PLC Security

SCADA and ICS Cyber Security: Facing the Facts

Posted by Eric Byres on May 03 2013

Our last blog, contributed by Thomas Nuth, highlighted the fact that industrial cyber security is now being discussed by heads of state within the international community - the

SCADA Cyber Security: An International Issue

Posted by thomas.nuth on Apr 18 2013

Three years ago, the concept of industrial cyber security became a popular discussion topic within the industrial networking community. Now the discussion has risen to the level of heads of state within the international community.

Securing SCADA Systems: Why Choose Compensating Controls?

Posted by Eric Byres on Apr 11 2013

In my last blog, I shared some secrets on how to successfully use patching in SCADA and control systems.

This week, I’ll look at the pros and cons of using compensating controls as an alternative to patching, and discuss the requirements for success.

Making Patching Work for SCADA and ICS Security

Posted by Eric Byres on Apr 04 2013

If you have read my previous blogs on patching for control system security, you might think I am completely against patching. Guess what? I’m not against them!

Patching for SCADA and ICS Security: The Good, the Bad and the Ugly

Posted by Eric Byres on Mar 26 2013

In my last blog, I discussed the reasons why critical industrial infrastructure control systems are so vulnerable to attacks from security researchers and hackers, and explained why patching for such systems is not a workable solution.

SCADA Security: Welcome to the Patching Treadmill

Posted by Eric Byres on Mar 14 2013

As regular readers of this blog know, after Stuxnet, security researchers and hackers on the prowl for new targets to exploit shifted their efforts to critical industrial infrastructure.

Unfortunately, the Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS) applications they are now focusing on are sitting ducks.

SCADA Security: Phishing Season is Open

Posted by Eric Byres on Mar 07 2013

Last week I received am email (shown further down on this page) purporting to be from the US Internal Revenue Service (IRS).

Key SCADA Security Questions for CEOs

Posted by ghale on Feb 28 2013

Editor’s Note: This is an excerpt from ISSSource.

It wasn’t that long ago when cyber security seemed like a foreign language to those folks entrusted with running companies. It was not like they didn’t know about it, but it just was not top of mind.

SCADA Security: Big Picture Planning is Key

Posted by bob.lockhart on Feb 18 2013

Editor's Note: this is an excerpt from the Pike Research Blog.

Speak Up NOW on New IF-MAP Specs for ICS and SCADA Security

Posted by Eric Byres on Feb 07 2013

We all agree that SCADA and Industrial Control System security needs to improve. However there is a lot of disagreement on what exactly needs to happen to make security for industrial systems easier to deploy and more effective.

PLC Security

"Understanding Deep Packet Inspection for SCADA Security"