State of SCADA Security Worries Researchers

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--742952673-1857805843-1328608658=:32551
Content-Type: TEXT/PLAIN; FORMAT=flowed; CHARSET=UTF-8
Content-ID: <alpine.DEB.2.02.1202070405372.32551-+lq4ijtN3NWD1tnzEPnUTA@public.gmane.org>
Content-Transfer-Encoding: quoted-printable

http://www.eweek.com/c/a/Security/State-of-SCADA-Security-Worry-Researche=
rs-234517/

By Fahmida Y. Rashid
eWEEK.com
2012-02-05

CANCUN, Mexico -- Recent reports painted a bleak picture of the security=20
issues plaguing industrial control systems, but the situation is=20
exacerbated by the fact that administrators are na=C3=AFve about the dang=
ers,=20
researcher said.

Researchers presented some alarming findings about the state of security=20
for supervisory control and data acquisition systems at the Kaspersky=20
Security Analyst Summit on Feb. 3. SCADA systems are used across varied=20
industries such as oil, water systems, electric grids, controlling=20
building systems, and the basic security model underlying these systems=20
is completely inadequate, they said.

Two researchers decided to try to find 100 bugs in 100 days in=20
industrial control system software, Terry McCorkle, an industry=20
researcher, told attendees at the conference. As they began their=20
research, it quickly became evident the team had underestimated the=20
severity of the problem.

"Ultimately, what we found is the state of ICS security is kind of=20
laughable," McCorkle said.

[...]


--742952673-1857805843-1328608658=:32551
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_____________________________________________________
Did a friend send you this article? Make it your
New Year's Resolution to subscribe to InfoSec News!
http://www.infosecnews.org/mailman/listinfo/isn
--742952673-1857805843-1328608658=:32551--