siemens

#1 ICS and SCADA Security Myth: Protection by Air Gap

Posted by Eric Byres on Jul 05 2012

Editor's Note: This is an updated version of this article, which was first published on June 30, 2011

Siemens PLC Security Vulnerabilities – It Just Gets Worse

Posted by Eric Byres on Aug 04 2011

My optimism regarding Siemens and its approach to SCADA/ICS security has just taken another big hit. There are major security problems at Siemens and they are not close to fixing them.

I am embarrassed I gave them such high marks in my previous blogs.

Siemens Cyber Security Report Card (Part 2 of 2) (plus Presentation)

Posted by Eric Byres on Jul 07 2011

This article continues our review of Siemens’ announcements and posture regarding cyber security as reflected at their Automation Summit last week. Part 1 of this post was published yesterday.

Siemens Cyber Security Report Card (Part 1 of 2) (plus Presentation)

Posted by Eric Byres on Jul 06 2011

The Siemens Automation Summit was held last week and both Joel Langill and I attended it, presented at it, and engaged in social media commentary regarding it. This article will summarize our opinion of Siemens’ announcements and posture regarding cyber security as we reflected o

Blaming Vendors Doesn’t Fix Today’s SCADA Security Issues

Posted by Eric Byres on Jun 20 2011

Last week in his blog article, Fix the Problem, Stop Bailing out Vendors, Dale Peterson made an impassioned statement that the SCADA security community:

Protecting Siemens S7-1200 PLCs against Security Vulnerabilities, Part 3/3

Posted by Eric Byres on Jun 13 2011

Over the past week, I have been digging into the Siemens S7 PLC vulnerabilities that were discovered by Dillon Beresford at NSS Labs in May.

Siemens S7-1200 PLC Security Vulnerabilities, Part 2/3

Posted by Eric Byres on Jun 10 2011

In my previous blog, I analyzed the contradictory information being circulated regarding the Siemens S7 PLC vulnerabilities that were discovered by Dillon Beresford at NSS Labs in May.

Digging for Facts on the Siemens S7-1200 PLC Security Vulnerabilities, Part 1/3

Posted by Eric Byres on Jun 09 2011

The recent news that Dillon Beresford at NSS Labs had discovered somewhere between four and six serious vulnerabilities in the Siemens S7 PLC product has created quite a storm of news and concern for critical asset owners.

The Italian Job – Multiple SCADA / ICS Vulnerabilities Go Public

Posted by Eric Byres on Mar 23 2011

Selling the concept of security for SCADA and ICS might still be struggling, but publishing vulnerabilities for SCADA and ICS equipment seems to be a growth industry.

Thirty-Four SCADA Product Vulnerabilities

The Many Paths of Stuxnet – How Robust are Today’s Best Practice Systems?

Posted by Eric Byres on Feb 22 2011

Over the past four months, Joel Langill, Andrew Ginter and I have been working on a really cool research project. We have been investigating how Stuxnet would infect an industrial site protected by a “high security architecture.”

siemens

"Understanding Deep Packet Inspection for SCADA Security"