Stuxnet
Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
January 2012
Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
March 2011
SCADA and CIP Security in a Post-Stuxnet World
October 2011
Presentation from: Byres Security, October 2011
"SCADA and CIP Security in a Post-Stuxnet World" summarizes a lot of information about the Stuxnet malware and how it has affected SCADA and CIP security. The presentation also goes into detail about the possibilities of a Son-of-Stuxnet.
Stuxnet News Coverage
October 2011
A summary of news articles on the Siemens WinCC Stuxnet malware.
Note: for information that Byres Security has created regarding Stuxnet, along with links to key industry material, visit Stuxnet Central.
ZDNet Podcast: Stuxnet, routing hacks and a seized iPad
June 2011
Podcast from: ZDNet.com.au, May 23, 2011
In this AusCERT-related podcast, Stilgherrian, Writer for ZDNet, interviews Eric Byres as he talks about the likelihood of seeing a "Son-of-Stuxnet" worm within the next year.
What Does Stuxnet Mean for Industrial Control Systems?
March 2011
Presentation from: Byres Security, March 2011
"What Does Stuxent Mean for Industrial Control Systems - The Future of Critical Infrastructure Security" summarizes a lot of information about the Stuxnet malware and discusses what it means for the future of SCADA and ICS security.
This presentation is ideal for anyone needing a crash course on Stuxnet, or as a tool for informing management about the implications of it.
"How Stuxnet Spreads" White Paper
March 2011
News coverage following the release of the White Paper "How Stuxnet Spreads – A Study of Infection Paths in Best Practice Systems" by Eric Byres, Andrew Ginter, and Joel Langill.
DigitalBond Podcast: February Edition of This Month In Control System Security
February 2011
Podcast from: Digitalbond.com, February 2011
Dale Peterson of DigitalBond.com talks with Eric Byres of Byres Security, Andrew Ginter of Abterra Technologies and Joel Langill of SCADAhacker.com, the three authors of the new 26-page whitepaper "How Stuxnet Spreads – A Study of Infection Paths in Best Practice Systems." 37:27 - 1:08:30
Industrial Control System Security Best Practices Inadequate in Blocking Advanced Malware Threats
February 2011
New "How Stuxnet Spreads" White Paper by three leading industrial security experts describes Stuxnet infection pathways and discusses how to protect SCADA systems......
How Stuxnet Spreads – A Study of Infection Paths in Best Practice Systems
February 2011
![]() |
The Stuxnet worm is a sophisticated piece of computer malware designed to sabotage industrial processes controlled by Siemens SIMATIC WinCC and PCS 7 control systems.
This paper describes an example of a site following high security architecture best practices and then shows the ways that the worm could make its way through the defences of the site to take control of the process and cause physical damage.
The paper closes with a discussion of the lessons that can be learned from the analysis of Stuxnet’s propagation pathways. It explains how owners of critical systems need to respond to protect control systems from future threats of this type.

