[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ISN] State of SCADA Security Worries Researchers



http://www.eweek.com/c/a/Security/State-of-SCADA-Security-Worry-Researchers-234517/

By Fahmida Y. Rashid
eWEEK.com
2012-02-05

CANCUN, Mexico -- Recent reports painted a bleak picture of the security issues plaguing industrial control systems, but the situation is exacerbated by the fact that administrators are naÃve about the dangers, researcher said.

Researchers presented some alarming findings about the state of security for supervisory control and data acquisition systems at the Kaspersky Security Analyst Summit on Feb. 3. SCADA systems are used across varied industries such as oil, water systems, electric grids, controlling building systems, and the basic security model underlying these systems is completely inadequate, they said.

Two researchers decided to try to find 100 bugs in 100 days in industrial control system software, Terry McCorkle, an industry researcher, told attendees at the conference. As they began their research, it quickly became evident the team had underestimated the severity of the problem.

"Ultimately, what we found is the state of ICS security is kind of laughable," McCorkle said.

[...]

_____________________________________________________
Did a friend send you this article? Make it your
New Year's Resolution to subscribe to InfoSec News!
http://www.infosecnews.org/mailman/listinfo/isn