1. SCADA NETWORK SECURITY BY SEENU@RIO LICET 4-AUG-12

2. My Interest In Network Security; This Talk  SCADA: The technical level of this talk has been tailored to insure that it doesn’t provided a detailed “cookbook” that can be used by the bad guys to attack SCADA Network systems.  Given the venue, we’re not going to talk about policy stuff today (but security policies are important). 2

3. WHAT IS SCADA ?  SCADA stands for “supervisory control and data acquisition ”.  It generally refers to a control system: a computer system monitoring and controlling a process  Supervisory control means monitoring & controlling the parameters of equipment

4. TYPES OF PROCESSES  SCADA controlling process can be Industrial process Infrastructure process Facility process industrial process infrastructure Process facility process

5. SCADA VULNERABILITIES  There were 129 public SCADA vulnerabilities, a massive increase over the 15 vulnerabilities in 2010.  Policy and Procedure Vulnerabilities  Platform Vulnerabilities  Network Vulnerabilities

6. Actually, SCADA Can Be Frighteningly “Exciting”…  SCADA insecurity may have contributed to the end of the Cold War *  SCADA may be of substantial interest to major terrorists  SCADA systems may suffer sabotage by disgruntled insiders, acting individually  SCADA may have “big” technical failures  … but we’d really prefer it to be VERY dull! 6

7. THE SECURITY OF SCADA SYSTEMS?????  Simple Protocols  Windows-Based Control Stations  Shared Passwords  Common Passwords Across Multiple Devices  Plain Text (Unencrypted) FR PASSWORD  Few Firewall Options

8. HOW TO OVERCOME OF EXCITING PROBLEM  Change the windows OS to Linux  Running proprietary software and communication protocol on TCP/IP based systems  Update intrusion detection systems  Familiar with embedded RTOS’S  Add SCADA security to your network security syllabus 8

9. CONCLUSION  SCADA is a control system  We have secure encrypted password  Lake of trained person  Initial capital investment  Add SCADA security to network syllabus  Make sure vendors know what SCADA security products.

10. Thanks for the Chance to Talk Today!  Are there any questions? 10

11. Any queries contact me dsrinivasan14@gmail.com