Travis Deyarmin

In This Presentation  What is Stuxnet  What is Flame  Compare/Contrast  Who is Responsible  Possible Repercussions

Stuxnet  Worm  Used 5 Zero-Days  Targets Siemens Control Software  Infected Through USB/Network  Destroyed Uranium Enrichment Centrifuges

Stuxnet

Flame  Sniffs Network  Screenshots  Recording Audio  Keylogger  Bluesnarfing  20 Expansion Modules

Flame

 Ways of infection were similar to Stuxnet  The Autorun.inf hacking was used by both  Used the same print spooler vulnerability

Flame

Similarities  Propagation  Shared a common module for EoP (0-day)  C&C servers scattered worldwide  Sharing Module

Differences StuxnetFlame  Sabotage  Specific  Hit PLC  Espionage  Adaptive  Hit Computers  20Mb

Who’s to Blame?  Joint op between US and Israel

 Made this kind of attack a political option  Source code is available Consequences

Conclusion  Stuxnet and Flame were worms targeted at Iran  Probable US involvement  Repercussions

References   industry-but-was-defeated-with-data-recovered/ industry-but-was-defeated-with-data-recovered/    me me   t_dossier.pdf t_dossier.pdf