Stuxnet report V: Security culture needs work
Looking over the long haul, one of the key lessons from this analysis is just how complex and interconnected a typical control system is.
03/24/2011
Looking over the long haul, one of the key lessons from this analysis is just how complex and interconnected a typical control system is. Potential pathways exist right from the outside world, through the Enterprise Control Network and down to the process controllers.
Because of this complexity, Stuxnet had many possible pathways to get to its target process. In the graphic below we summarized some of these pathways in an attack graph or infection data flow diagram. As complicated as this diagram looks, it is certainly incomplete — there are likely other potential paths this worm (and future worms) might take that we have missed.
Read the full-length article here.
- Related News:
Wind farm online after rotor crash - 24.03.2011 10:16- U.S. nuke design could help Japan - 24.03.2011 10:15
- Refinery faces fines over safety issues - 24.03.2011 10:14
- PG+E created own pipeline safety rule - 24.03.2011 10:13
- Crew feared pipeline pressure - 24.03.2011 10:12
- Walkie Talkie shuts nuke plant safety system - 24.03.2011 10:11
- Cyber task force eyes power grid - 24.03.2011 10:10
- Antivirus tools no match for different attack vectors - 24.03.2011 10:09
- Malware report: Learn from past attacks - 24.03.2011 10:08
- Hackers get hacked - 24.03.2011 10:07
- RSA hit by cyber attack - 24.03.2011 10:06
- More SCADA vulnerabilities found - 24.03.2011 10:05
- Wonderware vulnerability patch posted - 24.03.2011 10:04
- Stuxnet report IV: Worm slithers in - 24.03.2011 10:02
- Stuxnet report III: Worm selects site - 24.03.2011 10:01
No comments