vulnerabilities

SCADA and ICS Cyber Security: Facing the Facts

Posted by Eric Byres on May 03 2013

Our last blog, contributed by Thomas Nuth, highlighted the fact that industrial cyber security is now being discussed by heads of state within the international community - the

SCADA Cyber Security: An International Issue

Posted by thomas.nuth on Apr 18 2013

Three years ago, the concept of industrial cyber security became a popular discussion topic within the industrial networking community. Now the discussion has risen to the level of heads of state within the international community.

Securing SCADA Systems: Why Choose Compensating Controls?

Posted by Eric Byres on Apr 11 2013

In my last blog, I shared some secrets on how to successfully use patching in SCADA and control systems.

This week, I’ll look at the pros and cons of using compensating controls as an alternative to patching, and discuss the requirements for success.

SCADA Security: Tofino provides an Alternative to Patching

Posted by Eric Byres on Oct 17 2012

Last week I wrote about a serious issue in the patching of SCADA and ICS systems. Just when you think you are installing all needed patches, some critical ones are getting missed.

The Critical SCADA Security Patch that your Control System Isn’t Getting

Posted by Eric Byres on Oct 12 2012

Yesterday afternoon I received a note from another security expert that has left me a bit stunned.

Cyber Security Nightmare in the Netherlands

Posted by rahulsebos on Feb 20 2012

The first two weeks of February have been exciting times in the Netherlands, with many cyber security incidents making headlines in the news.

S4 SCADA Security Symposium Takeaway: Time for a Revolution

Posted by Eric Byres on Jan 20 2012

I am flying home from Digital Bond’s S4 SCADA Security Symposium as I write this (BTW this was a stellar event where, even as a security expert, I learnt an amazing amount). After listening to two days of excellent, but scary talks, the first thing that comes to mind is “SCADA/ICS security is in worse shape than I

Schneider Vulnerabilities: Where are the ICS/SCADA End Users?

Posted by Eric Byres on Dec 16 2011

On December 12, Rubén Santamarta publicly announced details of multiple vulnerabilities affecting the Schneider Electric Quantum Ethernet Module.

Siemens PLC Security Vulnerabilities – It Just Gets Worse

Posted by Eric Byres on Aug 04 2011

My optimism regarding Siemens and its approach to SCADA/ICS security has just taken another big hit. There are major security problems at Siemens and they are not close to fixing them.

I am embarrassed I gave them such high marks in my previous blogs.

Siemens Cyber Security Report Card (Part 2 of 2) (plus Presentation)

Posted by Eric Byres on Jul 07 2011

This article continues our review of Siemens’ announcements and posture regarding cyber security as reflected at their Automation Summit last week. Part 1 of this post was published yesterday.

vulnerabilities

"Understanding Deep Packet Inspection for SCADA Security"