The Bad Guys KnowList of Facts
The bad guys are now realizing that there is something here.
When I first wrote this fact more than 2 years ago it was new. Now I don't know how anyone could deny it. They have found SCADA plans with terrorists. In case you think this is a new phenomonon that is only occuring because of the current hype it was talked about back in 2002 with reconisence to back it up then and even before.
For some reason I keep running into people who say we shouldn't talk so loud about it.
Well two replies to that.
Worms and malware don't care what I say.
The real bad guys have known for years.
If you are involved in engineering control systems and you are not already developing a layered approach to security you will have a problem sooner or later. You might put it off by delaying getting scans to see how well you stand up or by stating that "we don't connect our SCADA systems to the IT network" but if you have IP connected systems (and more and more organizations do) sooner or later you'll deal with it.
It is best to deal with it in a controled environment.