First real-world SCADA attack in US

Steven Bellovin smb at cs.columbia.edu
Tue Nov 22 02:46:19 UTC 2011


On Nov 21, 2011, at 4:30 PM, Mark Radabaugh wrote:
>> 
>> 
> Probably nowhere near that sophisticated.   More like somebody owned the PC running Windows 98 being used as an operator interface to the control system.   Then they started poking buttons on the pretty screen.
> 
> Somewhere there is a terrified 12 year old.
> 
> Please don't think I am saying infrastructure security should not be improved - it really does need help.   But I really doubt this was anything truly interesting.


That's precisely the problem: it does appear to have been an easy attack.
(My thoughts are at https://www.cs.columbia.edu/~smb/blog/2011-11/2011-11-18.html)

		--Steve Bellovin, https://www.cs.columbia.edu/~smb









More information about the NANOG mailing list