[146749] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: First real-world SCADA attack in US

daemon@ATHENA.MIT.EDU (Hal Murray)
Mon Nov 21 17:22:24 2011

To: nanog@nanog.org
From: Hal Murray <hmurray@megapathdsl.net>
Date: Mon, 21 Nov 2011 14:21:21 -0800
Cc: Hal Murray <hmurray@megapathdsl.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


> On an Illinois water utility:
> http://www.msnbc.msn.com/id/45359594/ns/technology_and_science-security

That URL says:
> The Nov. 8 incident was described in a one-page report from the Illinois
> Statewide Terrorism and Intelligence Center, according to Joe Weiss, a
> prominent expert on protecting infrastructure from cyber attacks.

Joe Weiss gave a good talk at Stanford last Oct 12.
  http://www.stanford.edu/class/ee380/

My quick summary: The whole SCADA industry isn't tuned into network security 
issues.  It's not part of their culture.

----------

Several years ago, Idaho National Labs ran an experiment.  They blew up a 
diesel generator by remote control.  Aurora is the buzzword.

The abstract page for his talk has a link to a CNN video.  It only has a few 
seconds of the generator.  Here is a longer version on YouTube:
  http://www.youtube.com/watch?v=fJyWngDco3g


-- 
These are my opinions, not necessarily my employer's.  I hate spam.





home help back first fref pref prev next nref lref last post