SCADA NETWORK SECURITY BY LICET 4-AUG-12

My Interest In Network Security; This Talk  SCADA: The technical level of this talk has been tailored to insure that it doesn’t provided a detailed “cookbook” that can be used by the bad guys to attack SCADA Network systems.  Given the venue, we’re not going to talk about policy stuff today (but security policies are important). 2

WHAT IS SCADA ?  SCADA stands for “supervisory control and data acquisition ”.  It generally refers to a control system: a computer system monitoring and controlling a process  Supervisory control means monitoring & controlling the parameters of equipment

TYPES OF PROCESSES  SCADA controlling process can be Industrial process Infrastructure process Facility process industrial process infrastructure Process facility process

SCADA VULNERABILITIES  There were 129 public SCADA vulnerabilities, a massive increase over the 15 vulnerabilities in  Policy and Procedure Vulnerabilities  Platform Vulnerabilities  Network Vulnerabilities

Actually, SCADA Can Be Frighteningly “Exciting”…  SCADA insecurity may have contributed to the end of the Cold War *  SCADA may be of substantial interest to major terrorists  SCADA systems may suffer sabotage by disgruntled insiders, acting individually  SCADA may have “big” technical failures  … but we’d really prefer it to be VERY dull! 6

THE SECURITY OF SCADA SYSTEMS?????  Simple Protocols  Windows-Based Control Stations  Shared Passwords  Common Passwords Across Multiple Devices  Plain Text (Unencrypted) FR PASSWORD  Few Firewall Options

HOW TO OVERCOME OF EXCITING PROBLEM  Change the windows OS to Linux  Running proprietary software and communication protocol on TCP/IP based systems  Update intrusion detection systems  Familiar with embedded RTOS’S  Add SCADA security to your network security syllabus 8

CONCLUSION  SCADA is a control system  We have secure encrypted password  Lake of trained person  Initial capital investment  Add SCADA security to network syllabus  Make sure vendors know what SCADA security products.

Thanks for the Chance to Talk Today!  Are there any questions? 10

Any queries contact me