SEARCH Archives
Loading
Sponsored by:

Why we worry about cyber security

There are times when we see glimmers of hope, and then there are situations like this one.

05/01/2012


One of the legitimate complaints against industrial networking and control equipment from a cyber security standpoint is that many individual devices are very soft targets. User names and passwords are often difficult to change or even fixed. Programs can be changed without authentication. That sort of thing. If the network does not adequately shield these from the outside, they are usually easy to break. As one cyber security student described a PLC, “If you can ping it, you can own it.”

 

Security at the device level, Control Engineering December 2011 issue article graphicThat being the case, stories like this one are particularly problematic. According to reports by Wired and The H, RuggedCom has built an undocumented backdoor into its ROS (rugged operating system) that cannot be disabled. This is designed to be a factory user account, and the password can be derived from the MAC address. There are workarounds suggested by the US-CERT, but this is a band-aid until the company comes up with a more substantial solution.

 

To make matters worse, the stories allege that RuggedCom has known about this for a year. Or, maybe it's more accurate to say that the cat has been out of the bag for a year, because the company has known about it all along. Read the stories, but don’t complain to me if they turn you into an insomniac.

 

Peter Welander, pwelander(at)cfemedia.com



No comments
The Top Plant program honors outstanding manufacturing facilities in North America. The 2012 Top Plant winners have been named.
In 2012, Plant Engineering's Product of the Year program will celebrated its 25th anniversary. Read about the 2012 winners and nominate for 2013.
The Leaders Under 40 program features outstanding young people who are making a difference in manufacturing. View the 2012 Leaders here.
Find the fake! Counterfeit electrical equipment a clear and present danger
Investment in excellence: One plant's improved productivity and quality was repaid when their company expanded the facility
Strategic uptime, Increased capacity goes right to the bottom line
Case Study Database

Case Study Database

Get more exposure for your case study by uploading it to the Plant Engineering case study database, where end-users can identify relevant solutions and explore what the experts are doing to effectively implement a variety of technology and productivity related projects.

These case studies provide examples of how knowledgeable solution providers have used technology, processes and people to create effective and successful implementations in real-world situations. Case studies can be completed by filling out a simple online form where you can outline the project title, abstract, and full story in 1500 words or less; upload photos, videos and a logo.

Click here to visit the Case Study Database and upload your case study.

Alarm management tips, Power management, Building automation
Estimating data center PUE, Design tips for cost savings, Networked controls, NFPA 70E
Attacking Energy Costs: Strategies for showing financial return on energy management investments

2012 Salary Survey

In a year when manufacturing continued to lead the economic rebound, it makes sense that plant manager bonuses rebounded. Plant Engineering’s annual Salary Survey shows both wages and bonuses rose in 2012 after a retreat the year before.

Average salary across all job titles for plant floor management rose 3.5% to $95,446, and bonus compensation jumped to $15,162, a 4.2% increase from the 2010 level and double the 2011 total, which showed a sharp drop in bonus.

2012 Salary Survey Analysis

2012 Salary Survey Results

About Us | Contact Us | Advertise | Subscribe to Magazine | Site Map | Privacy Policy
Home | Channels | New Products | Media Library | Connect | Industry News | Events and Awards | Newsletters | Blogs | Magazine
Control Engineering | Plant Engineering | Consulting-Specifying Engineer
All content copyright © 2010-2013 CFE Media. All rights reserved.