scada

Welcome to the 'scada' tag page at Technorati. This page features content from the farthest reaches of the Blogosphere that authors have "tagged" with 'scada'.

Are you an expert about 'scada'? Do you want to be the Technorati authority on 'scada'? You can write a description that will appear right here: Join Blogcritics!

Original Technorati articles tagged “scada”

• in Technology
  "Flame War" Takes On A New Meaning
  "Flame" malware illuminates the cyber-warfare reality of the times
  by oldgoat1957 / on May 30, 2012

Latest blogosphere posts tagged “scada”

 

• Friday News & Notes

  
  — Authority:
  I asked Eyal Udassin of C4-Security in Israel to comment on the ICS hack disclosed this week . “The hack isn’t something for the books. It’s of small kibutz named Sa’ar in the northern part of Israel, indeed from a year ago. The operator had a remote access software with no password on it, so not ...
  1 week ago

• John The Ripper – S7 Password Cracking

  
  — Authority:
  At S4x13, Scadastrangelove ( @scadasl ) released a offline brute force password cracking script ( http://pastebin.com/0G9Q2k6y ). Shortly after the script was released the functionality from that script was added into John The Ripper. Documented in The Rack  is how John The Ripper is capable of cracking S7 ...
  1 week ago

• S4x13 Video: Detecting 0-Day Attacks with Non-Signature IDS

  
  — Authority:
  Damiano Bolzoni’s of Security Matters presented Detecting 0-Day and Targeted Attacks on ICS with Non-Signature Based IDS. While the quantitative mode of anomaly detection, looking at the quantity of packets, has had some success, qualitative approach has had a lot of research with minimal practical results. The ...
  1 week ago

• Honeypot with fake passwords to hackers

  
  — Authority:
  It took just 18 hours after the expert in information security Kyle Wilhoit (Kyle Wilhoit) connected to the Internet with two fake and one real SCADA-system – and they have already started to attack someone. The widespread popularity among script kiddies search engines such as Shodan, as well as basic tools for ...
  1 week ago

• Response Fuzzing

  
  — Authority:
  Fuzzing, as a practice, has been around for a while. Throw garbage at an input to a program and see what falls apart. Analyze the crashes and dumps, and see if any involve commonly exploitable issues, such as buffer overflows, off by one errors, etc. I’ve seen SCADA protocols brought low by a simple repetition of ...
  1 week ago

• Instagram, Vine Media-Sharing Apps Get New Social Features

  
  — Authority:
  The popular Instagram and Vine photo- and video-sharing apps both got new features that let you tag and mention people. The iPhones front-facing camera can also now also be used help Vine users capture video of themselves doing random things, such as eating tacos and/or Oreo cookies.
  1 week ago

• SCADA and ICS Cyber Security: Facing the Facts

  
  — Authority:
  Our last blog , contributed by Thomas Nuth, highlighted the fact that industrial cyber security is now being discussed by heads of state within the international community - the read more
  2 weeks ago

• Talking LulzSec and more on ABC Download This Show

  
  — Authority:
  My third radio spot for this busy radio week was Marc Fennell’s Download This Show , which we recorded on Wednesday morning. Can you imagine being able to control a crematorium, a powerstation or traffic lights somewhere out the world from your laptop? Welcome to the mysterious search engine Shodan . If ...
  2 weeks ago

• Friday News & Notes

  
  — Authority:
  HD Moore and Rapid7 highlighted security issues related to serial port servers , aka terminal servers in the ICS world. They found a large number that were Internet accessible and highlighted some vulnerabilities that have published Metasploit modules. Paul Roberts captured my thoughts in an article at Security ...
  3 weeks ago

• Update: Serial Server Flaws Expose Critical Infrastructure

  
  — Authority:
  A survey conducted by the firm Rapid 7 has found evidence that widespread vulnerabilities and insecure configuration of ubiquitous networking components known as serial port (or “terminal”) servers, may expose a wide range of companies and critical assets – including point of sale terminals, ATMs and industrial ...
  3 weeks ago

• Infosecurity Europe 2013: SCADA The Next Threat

  
  — Authority:
  Physical and industrial control systems are now all around us, in the form of smart grid electrical meters, traffic light control systems and even basic proximity door access control panels.  These basic computer systems can hold a vast array of sensitive data, with fully connected network access, central processing ...
  3 weeks ago

• E.ON selects geoAMPS Software to Help Manage Wind Projects

  
  — Authority:
  E.ON Climate and Renewables (EC&R) North America, one of the world’s largest owners of renewable energy projects, has begun utilizing software developed by geoAMPS, a Columbus-area technology company, to help manage its many wind energy projects in the United States and Canada. The Chicago-based energy company ...
  3 weeks ago

• Mining Malware – Part I

  
  — Authority:
  I first found out about Stuxnet from this post on the WildersSecurity forum, and not through any of the other channels frequently mentioned. It was early July 2010 when I saw the post, and I immediately started pulling whatever information I could get. It wasn’t much though, at the time I wasn’t talking to many ...
  3 weeks ago

• Friday News & Notes

  
  — Authority:
  Siemens had a webinar and put out more information on the security features integrated into the S7-1500 PLC . The features offer some important integrity protection if the Siemens development team implemented them properly. The videos on the site are high level only so it’s too early to say, but we will gather and ...
  4 weeks ago

• SCADA Cyber Security: An International Issue

  
  — Authority:
  Three years ago, the concept of industrial cyber security became a popular discussion topic within the industrial networking community. Now the discussion has risen to the level of heads of state within the international community. read more
  4 weeks ago

• Skip CIP version 4 and go straight to version 5

  
  — Authority:
  On April 18th, 2013 FERC held a meeting in which it heard from NERC regarding the proposed Critical Infrastructure Protection version 5 standards. The committee voted to skip version 4 and move straight to version 5, and the recently issued Presidential executive order on critical infrastructure cyber security ...
  4 weeks ago

• The Need for Network Segregation in Critical Infrastructure Systems

  
  — Authority:
  A recent article in the NY Times claims: The vast majority of targeted computer attacks now start with a malicious e-mail sent to a company employee. Now evidence suggests that the same technique could be used to attack watersheds, power … Continue reading →
  4 weeks ago

• NIST: It’s Time to Abandon Control Frameworks as We Know Them

  
  — Authority:
  Send to KindleDeveloping a Framework To Improve Critical Infrastructure Cybersecurity: On February 12, 2013, the White House announced the “Improving Critical Infrastructure Cybersecurity” Executive Order. Subsequently, on February 26, 2013, the National Institute of Standards and Technology (NIST) published in ...
  4 weeks ago

Comments about scada