Hacking SCADA/SAS Systems Used Techniques, Known Incidents and Possible Mitigations

by Derek on Nov.05, 2009, under SCADA

I have been working in the SCADA engineering, network design, project governance and security area for lots of years.

As a result I have many documents and techniques I will be sharing here. This is the first of many documents which I hope others will find informative and help others to understand and shape their approach to these environments.

Local file

:DES, environment, hack, Hacking, Microsoft, network, SCADA, security, technique

RSS feed for this post (comments) · TrackBack URI

Howdy. Welcome to Madrock!
Thanks for dropping by! Feel free to join the discussion by leaving comments, and stay updated by subscribing to the RSS feed. See ya around!
Categories
Recent Posts
- No need to bypass security with a boot disk – 17 year old Windows exploit found
  
  The problem has been discovered in the Virtual DOS Machine (VDM) introduced in 1993 to support 16-bit applications (real mode applications for 8086). VDM is based on the Virtual 8086 Mode (VM86) in 80386 processors and, among other things, intercepts hardware routines such as BIOS calls. Google security team member Tavis Ormandy has found several [...]
  
  more...
- The Internet is the modern day electricity
  
  Recently I have been been sorting through some of my old electronic engineering books and found myself randomly flicking through circuit design principals and practical electronics/radio theory application of calculus.
  I remember the amount of hours I spent trying to get the different laws (Faraday, Coulomb, Kirchhoff, Lenz, Ohm, etc.) stuck in my head ready for [...]
  
  more...
- SSLv3 / TLS Man in the Middle vulnerability
  
  Recently I have been looking into the vulnerabilities in the TLS negotiation process discovered late last year.
  There are a range of experts debating the exploit methods, tools and how it may be fixed (server or client site or both). From what I have seen so far this may prompt a change to the TLS standard [...]
  
  more...