|
Dec 09
2011
|
|
On November 18, 2011, various media outlets released information on two potentially serious SCADA hacking attempts. According to a news release on the SCADA update website SCADAhacker.com, a water utility district in Springfield, IL suffered what appeared to be a “blended attack.” The SCADA hacking incident in Springfield appeared to be a compound attack in which, “credentials were first stolen from a supplier and then later used to gain remote access to another victim’s SCADA system.”
The SCADA attack in Springfield, IL closely mirrored a later attempt on the same day in South Houston, Texas. The FBI was forced to investigate these two attacks and remain involved in an attempt to identify a motive.
Each of these attacks could have proven to be disastrous to the safety of two public water sources in two major cities in the United States. Armed with the knowledge of the seeming permeability of many SCADA systems, it becomes apparent that careful measures must be taken to adequately ensure the safety and protection of these systems.
Cameron Camp, Sr. Security Researcher at ESET suggests a number of small steps that can be taken to provide against such attacks. For example, Camp points out that in both the Springfield, IL and the South Houston, TX SCADA hacking incidents, the passwords that each organization was using to protect their systems were merely 3 characters. Ideally, in order to protect against a potentially disastrous hacking episode system administrators must employ the use of a more complex password protection system.
Peter Streips, President of Network Security Group, Inc., recommends combining an intelligent password setting procedure along with the utilization of specific network security products in order to adequately protect your potentially vulnerable network from an outside attack. In order to ensure the utmost security for your network, Network Security Group, Inc. works with a number of preferred vendors, such as ESET, to provide you with the most up to date solutions for all of your network security needs.



