Cyber security
Stuxnet News Coverage
October 2011
A summary of news articles on the Siemens WinCC Stuxnet malware.
Note: for information that Byres Security has created regarding Stuxnet, along with links to key industry material, visit Stuxnet Central.
ICSJWG Fall 2010 Conference
October 2010
Seattle, Washington
October 25 - 28, 2010
Byres Security speaker:
Eric Byres, CTO
Date: Wednesday, October 27, 2010
Time: 14:15 - 15:00
Session: Track 2
Topic: SCADA and Control Systems Security: New Standards Protecting Old Technology
Joann Byres, CEO, also attended the conference.
Member Login RequiredDue to the sensitive nature of this document, you must be logged in to access it.
Login Register to become a site member (free) Contact Us
Siemens PCS7 WinCC Malware
October 2010
New Stuxnet White Paper: Analysis of the Siemens WinCC / PCS7 “Stuxnet” Malware for Industrial Control System Professionals.
Stuxnet is a computer worm designed to take advantage of a number of previously unknown vulnerabilities present in the Windows operating system and Siemens SIMATIC WinCC, PCS7 and S7 product lines.
It was designed to target one or more industrial systems that use Siemens PLCs with the apparent objective of sabotaging industrial processes.
This White Paper summarizes the current known facts about the Stuxnet worm and the actions that operators of SCADA and ICS systems can take to protect critical operations.
Also included is Joel Langill's excellent video that shows in detail how Stuxnet infects a system.
Security breakthrough for OPC-based industrial automation
September 2010
News coverage following the release of the Tofino OPC Enforcer.
Belden releases new Plug-n-Protect OPC firewall to provide robust cyber security for automation facilities
September 2010
Belden has recently introduced version 1.6.0 of its Hirschmann™ EAGLE20 Tofino industrial network security system, including the new EAGLE20 Tofino OPC Enforcer Loadable Software Module (LSM). Developed by Byres Security Inc. for Hirschmann™, the OPC Enforcer locks down any system using the widely installed OPC Classic protocol, providing superior security over what can be achieved with conventional firewall solutions.
Flash drive launches cyber-attack
September 2010
At the beginning of the year I hosted a podcast interview on cyber security with Eric Byres, chief technology officer of Byres Security Inc. The interview was conducted to help our audience understand the risks of cyber attacks and learn how to mitigate them.
Securing Your OPC Classic Control System
August 2010
by Eric Byres, security expert and CTO of Byres Security and Thomas J. Burke, President, OPC Foundation.
OPC Classic is a software interface technology used to facilitate the transfer of data between different industrial control systems. It is widely used to interconnect Human Machine Interface (HMI) workstations, data historians and other hosts on the control network with enterprise databases, Enterprise Resource Planning (ERP) systems and other business-oriented software. Unfortunately, securely deploying OPC Classic has proven to be a challenge until recently.
How integrators and manufacturers approach upfront safety integration and the resulting benefits
August 2010
System integration: Incorporating safety into a machine or a process at the design stage is more cost-effective than doing so later. Here’s a look at how several integrators and manufacturers approach upfront safety integration and the resulting benefits.
Control networks are too open to cyber attacks
August 2010
Most automation specialists are shocked to find out how much traffic is on their production control networks. Find out how installing the latest technology and adopting tighter policies for securing production networks can help to protect the integrity of critical control, safety, and regulatory data and processes.
Segmenting control and automation networks from the business network
July 2010
Plant facilities from the smallest to the largest should have their business networks separate from their automation or control networks on the production floor. ControlDesign writes about a common and frightening scenario of what could happen when plant networks are not segmented correctly.
Eric Byres
Frank Williams
