I like this quote from Dale.
This will be the next Maroochy Shire in every SCADA security presentation for the next five years.
skip to main |
skip to sidebar
One of the reasons I am writing down these thoughts is so that people that have more information than I can correct me when I am wrong. Hopefully I will then learn.
Subscribe via email
Labels
- Control Systems (25)
- Music (24)
- Security Layers (20)
- Energy Environment (19)
- Risks and Metrics (19)
- Crazy Ideas (13)
- Singularity (12)
- Funny (11)
- Radiation and Polonium (11)
- Scanning SCADA (11)
- Wireless SCADA (11)
- Political (10)
- Nano Tech (9)
- Rant (8)
- Security Tools (8)
- Submarines (8)
- MPAA and RIAA (5)
- Sony Crappy (5)
- Quantum (4)
- Not So Random Quote (3)
- QotW (3)
- Security Politics (3)
- Vuln (3)
- Economy (1)
- FMEA (1)
- Health Care (1)
- Not as funny as it could be (1)
- Racism (1)
- Random Restart (1)
Contact Email
DCSSEC [at] gmail.com
Blogroll
Blog Archive
-
▼
2007
(215)
-
▼
May
(14)
- Going back to Steam - Sort of
- Browns Ferry
- Scientology
- Appologize
- Control System Cyber Security Conference Registrat...
- Nuclear Attribution
- Cool I want 42 or or 2112 or or 8675309 or or the ...
- How to stomp out XSS and SQL injection at your com...
- I Support Democracy in Iraq
- Epidemic in China Killing Pigs
- When the Prophet Speaks - AI
- Yahoo Music Night
- Banning Code
- Terrifying article.
-
▼
May
(14)
3 comments:
...Read the NRC report. Look at how carefully crafted the description was. It should be read very carefully. I have my doubts the PLC vendor was quoted in context.
I don't know if we'll ever get to the bottom of this. My suspicion is that someone's neck is on the line and they're doing all they can to deflect the glare of the investigation. I can't say I blame them, even if it is wrong.
I agree Jake though I'll shy away from any specific suspicions. I will say that there were a ton of engineering mistakes in this one.
Lets start with using broadcasts as a primary commmunication mechanism. (I'm guessing rockwell but not certain)
Have a loss of PLC communication result in a cessation of steady state opperation for essential equipment.
Questionable failsafe status. (granted these are highly dependant on design items we don't know)
...
Jim, there isn't much wrong with using broadcasts in an isolated producer/consumer network such as ControlNet.
The wrongness, in my hedged opinion (given the dearth of information here), is that this network wasn't isolated from everything else.
Too many people see Ethernet in use in Control Systems and think it must be just like the Ethernet they see everywhere else. Nothing could be further from the truth. We use Ethernet media because it's fast, easy to test with off the self products, and easy to fix. However, we can not transport just any traffic on it.
I really don't know what protocols they used over the Ethernet, whether it was TCP/IP based, or what else it may have used. I've seen all sorts of interesting Ethernet-ish implementations. The only thing they have in common is that they use the same physical media.
And that's really all this is about. What is industrial, should stay industrial. Traffic loads should be carefully analyzed. There should be no room for error of this sort. But apparently, there was...
Post a Comment