2010 « Waterfall Security Solutions

Waterfall and One Way Security

1. Waterfall Has More Control System “Connectors” A “connector” allows what is typically two-way traffic to be sent through a one-way security device. You essentially install a protocol or application client / server on both sides of their device. The secure side server gets the information as usual, then pushes it out to the insecure side server using more

Following Stuxnet Trojan, NERC security chief calls for rugged software

The security chief at the North American Electric Reliability Corp. (NERC) is calling for better designed and more hardened systems in the wake of the Stuxnet malware threat. The Stuxnet Trojan quickly gained the attention of the security industry because it was one of the first pieces of malware to use multiple previously unknown vulnerabilities. more

Firewall Configuration Errors Revisited

Abstract: Practically every corporation that is connected to the Internet uses firewalls as the first line of its cyber-defense. However, the protection that these firewalls provide is only as good as the policy they are configured to implement. The first quantitative evaluation of the quality of corporate firewall configurations appeared in 2004, based on Check Point more

New threat: Hackers look to take over power plants

Computer hackers have begun targeting power plants and other critical operations around the world in bold new efforts to seize control of them, setting off a scramble to shore up aging, vulnerable systems. Cyber criminals have long tried, at times successfully, to break into vital networks and power systems. But last month, experts for the first time discovered more

DHS Ramping Up Defense of Critical Control Systems

The discovery of the first worm to target networks controlling power plants points has prompted an expansion of specialized forensic teams to combat the cybersecurity threat. The Department of Homeland Security (DHS) plans to ramp up a program that sends specialized forensic teams to combat the cybersecurity threat on U.S. critical control systems more

Siemens Gets Attacked by Trojan

In the USA today, Siemens is strongly warning its users that Trojan, which is the name of a certain malware program is directly targeting PCS 7 as well as Simatic WinCC. This virus is further distributed with the use of USB memory sticks. The sad part is that it is very good at taking advantage of the present vulnerabilities of Microsoft security. more

Siemens SCADA systems under attack by information stealing worm

The recently discovered Stuxnet worm that contains the password for Siemens' SCADA systems is wreaking havoc around the world. The Simatic WinCC SCADA system, which runs on Windows and is used by many utilities and factories, uses a database that is protected by a hard-coded password that has been publicly revealed on a couple of forums more

Cyber attack “war game”

Security experts launch a cyber attack "war game" to test the nation's cyber security defenses. more

Report: Critical Infrastructures Under Constant Cyberattack Globally

Critical infrastructure systems around the world are the targets of repeated cyberattacks, according to a new global survey of technology executives in these industries. They believe some of the attacks are coming not just from individual cybercriminals but terrorists and foreign nation states. The United States and China are believed more

In the Crossfire: Critical Infrastructure in the Age of Cyber War

In an ever more networked world, the cyber vulnerabilities of critical infrastructure pose challenges to governments and owners and operators in every sector and across the globe. With the global economy still fragile after last year’s financial crisis, assuring the integrity and availability of key national industries may fall out of focus as a government more

2010