Archief
- De topics van lang geleden
usa blackout by worm???
15-08-2003, 19:35 door Anoniem, 7 reacties
usa taking down by worm
****Regarding the potential for cyber war and what the threat is. Are SCADA systems the weak link? Is that why it's important to understand this technology?
SCADA systems are only one component of U.S. critical infrastructure. They're not the most important component, but they're one that we don't understand very well today. They're one that has difficulty applying security. We understand physical security, we know how to achieve physical security. So when we look at SCADA, we're looking at only one node in the overall security approach to U.S. critical infrastructure.
-----------------------
Scada is mostly running on windows machines...
do they patch????
Virii
****Regarding the potential for cyber war and what the threat is. Are SCADA systems the weak link? Is that why it's important to understand this technology?
SCADA systems are only one component of U.S. critical infrastructure. They're not the most important component, but they're one that we don't understand very well today. They're one that has difficulty applying security. We understand physical security, we know how to achieve physical security. So when we look at SCADA, we're looking at only one node in the overall security approach to U.S. critical infrastructure.
-----------------------
Scada is mostly running on windows machines...
do they patch????
Virii
Reacties (7)
SCADA systems, and there's also a commonality in the communication handshakes or protocol between systems, like in the electrical grid. Is that a problem, and explain what the situation is.
The commonality in SCADA systems is really the technology that they're adopting to be effective and cost-effective in our current economy, and that is Internet technologies, IP-based communications, and operating systems that are popular and are prevalent in our economy. The problem with adopting these technologies -- SCADA using these technologies to implement its command and control -- is that they're adopting not only the technology but they're adopting the broad base of vulnerabilities and adversaries that are able to take advantage of those vulnerabilities.
Weiss says also that our control centers have in almost all cases firewalls, intrusion detection, demilitarized zones, everything you could put around them to secure them. That same thing cannot be said for power plants for substations.
It has been our experience that the SCADA infrastructure is not protected to the same degree as IT infrastructure, as far as computer security and information security. I think that those techniques and technologies are being adopted today. ...
The commonality in SCADA systems is really the technology that they're adopting to be effective and cost-effective in our current economy, and that is Internet technologies, IP-based communications, and operating systems that are popular and are prevalent in our economy. The problem with adopting these technologies -- SCADA using these technologies to implement its command and control -- is that they're adopting not only the technology but they're adopting the broad base of vulnerabilities and adversaries that are able to take advantage of those vulnerabilities.
Weiss says also that our control centers have in almost all cases firewalls, intrusion detection, demilitarized zones, everything you could put around them to secure them. That same thing cannot be said for power plants for substations.
It has been our experience that the SCADA infrastructure is not protected to the same degree as IT infrastructure, as far as computer security and information security. I think that those techniques and technologies are being adopted today. ...
zal wel eens willen weten of zij ook patchen t.a.v w32.blast.worm
zou geen leukere variant op msblast kunnen bedenken als dit
greetz
Virii
zou geen leukere variant op msblast kunnen bedenken als dit
greetz
Virii
Originally posted by Unregistered
zal wel eens willen weten of zij ook patchen t.a.v w32.blast.worm
zou geen leukere variant op msblast kunnen bedenken als dit
greetz
Virii
Leukere? Zeker grootgebracht door rivaliderende apen zeker?zal wel eens willen weten of zij ook patchen t.a.v w32.blast.worm
zou geen leukere variant op msblast kunnen bedenken als dit
greetz
Virii
Nee, het bericht is al reeds tegengesproken door DShield. Er is geen sprake van welke worm dan ook die een power-drain heeft mogelijk gemaakt.
Originally posted by Unregistered
Nee, het bericht is al reeds tegengesproken door DShield. Er is geen sprake van welke worm dan ook die een power-drain heeft mogelijk gemaakt.
Nee, het bericht is al reeds tegengesproken door DShield. Er is geen sprake van welke worm dan ook die een power-drain heeft mogelijk gemaakt.
weet je wat lachen is? in het voormalig russisch ruimte station MIR draaiden ze met een SONY MSX2 Computer, dus nu vraag ik me af of ISA ruimtestation op Microsoft Windows of Linux draait, en jah een virusbesmetting lijkt me niet onwaarschijnlijk daar in de ruimte, in de tijden van MSX2 hadden ze die problemen nog niet...
Ik weet zeker dat ze emailen vanuit de ruimte dat zag ik bij NASA op de TV....
To: [email]ISA@nasa.gov[/email]
Subject: Re: Your Movie
=================
See the attachement, it contains a pretty movie....
1 klikje en het hele ruimte station besmet...
Originally posted by Mpas
Leukere? Zeker grootgebracht door rivaliderende apen zeker?
Leukere? Zeker grootgebracht door rivaliderende apen zeker?
rivaliderende ?
Bedoel je rivaliserende of revaliderende ????
Reageren
Deze posting is gelocked. Reageren is niet meer mogelijk.
Junior DevOps Engineer
Certified Secure is op zoek naar een Junior DevOps Engineer. Deze functie is een stuk interessanter dan de term doet vermoeden! Om jou als potentiële nieuwe collega meteen te laten zien wat we doen hebben we speciaal voor jou een selectie gemaakt van een aantal leuke security challenges. Are you ready for a challenge?
Cybersecurity Trainer / Streamer
Toe aan een nieuwe nieuwe job waarmee je het verschil maakt? In de Certified Secure trainingen laat je deelnemers zien hoe actuele kwetsbaarheden structureel verholpen worden. Ook werk je actief mee aan de ontwikkeling van onze gamified security challenges. Bij het maken van challenges kom je telkens nieuwe technieken tegen, van Flutter tot GraphQL, van Elastic Search tot Kubernetes.
